Struct ActivePolicy 

pub struct ActivePolicy {
    pub resolved: ResolvedPolicy,
    pub redaction: Vec<(String, Regex)>,
    pub content_valid: bool,
    pub filters: FilterConfig,
    pub egress: EgressConfig,
    /* private fields */
}

A resolved policy plus its precompiled redaction regexes — the cached, hot-path-ready form.

Fields

resolved: ResolvedPolicy

redaction: Vec<(String, Regex)>

(label, compiled regex) — labels are the pack’s [redaction] keys. Invalid/over-budget compilation makes the whole policy fail closed.

content_valid: bool

filters: FilterConfig

Compiled inbound content filters (GL #675), built once from the pack’s [filters] section.

egress: EgressConfig

Compiled egress/output DLP config (GL #676), built once from the pack’s [egress] section.

Implementations

impl ActivePolicy

pub fn within_horizon(&self) -> bool

Whether this policy may still be acted on: read on the real clock at every use, so a policy that is kept — in a view, a snapshot or a caller’s variable — ends with its signed horizon and not with the request that obtained it. Exclusive, like the verifier’s own check. An expiry once observed is final for this policy.

pub fn from_resolved(resolved: ResolvedPolicy) -> Self

pub fn tool_allowed(&self, tool: &str) -> bool

Whether tool is permitted by this policy’s allow/deny lists. deny_tools always wins; an allow_tools allowlist, when set, is exclusive (only listed tools pass).