Struct ContextGatewayConfig 

pub struct ContextGatewayConfig {
    pub enabled: bool,
    pub mode: GatewayModeV1,
    pub secrets: FilterAction,
    pub pii: FilterAction,
    pub injection: FilterAction,
    pub classification: FilterAction,
    pub max_inspected_bytes: usize,
    pub detector_timeout_ms: u64,
    pub destination_constraints: Vec<DestinationConstraintV1>,
    pub allowed_destinations: Vec<DestinationV1>,
    pub hud: HudPlacement,
}

[context_gateway] — global only; never merged from a project-local file.

Fields

enabled: bool

Master switch. LEAN_CTX_CONTEXT_GATEWAY=off overrides it.

mode: GatewayModeV1

secrets: FilterAction

Credentials and keys (patterns from [secret_detection]).

pii: FilterAction

Checksum-validated PII only: payment cards.

injection: FilterAction

Prompt-injection heuristic (OWASP LLM01).

classification: FilterAction

Explicit classification markings (CONFIDENTIAL, classification: …).

max_inspected_bytes: usize

Bytes each detector may inspect per object; beyond it, coverage is partial. Governed and sovereign modes withhold partially inspected content, developer mode delivers it with a visible note.

detector_timeout_ms: u64

Per-detector time budget; a detector that runs out reports timed_out.

destination_constraints: Vec<DestinationConstraintV1>

Additional placement constraints applied to every final egress target. These remain active when content scanning is disabled.

allowed_destinations: Vec<DestinationV1>

Optional target allow-list. Provider and locality are always checked; model/account/region are checked when the configured entry supplies them. Unknown locality never matches. Account references are configured labels, not provider-verified identities.

hud: HudPlacement

Where redaction counts are shown (see hud).

Implementations

impl ContextGatewayConfig

pub fn enabled_effective(&self) -> bool

Effective master switch. The LEAN_CTX_CONTEXT_GATEWAY kill switch (0|false|off) is a developer convenience: it disables admission only in developer mode. A governed or sovereign deployment is configured by its operator in the global file; a process environment cannot switch its protection off, so the variable is ignored there (and reported, see Self::kill_switch). Any other value still forces the gateway on.

pub fn kill_switch(&self) -> KillSwitch

What the LEAN_CTX_CONTEXT_GATEWAY environment variable does under this configuration (for doctor and the admission log). Reads the live environment.

Trait Implementations

impl Clone for ContextGatewayConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContextGatewayConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ContextGatewayConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ContextGatewayConfig

where ContextGatewayConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ContextGatewayConfig

impl PartialEq for ContextGatewayConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ContextGatewayConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContextGatewayConfig