Struct SecurityPosture 

pub struct SecurityPosture {
    pub jail: JailState,
    pub shell: ShellSecurity,
    pub secrets_enabled: bool,
    pub secrets_redact: bool,
}

A snapshot of every security-relevant switch, resolved exactly the way the runtime enforces it (env → config → secure default).

Fields

jail: JailState

Filesystem path-jail state.

shell: ShellSecurity

Shell-command gating mode.

secrets_enabled: bool

Whether secret/.env detection runs on tool output.

secrets_redact: bool

Whether detected secrets are actually masked (vs only flagged).

Implementations

impl SecurityPosture

pub fn detect() -> Self

Resolve the live posture from config + env. Pure read, no side effects.

pub fn level(&self) -> PostureLevel

Derived coarse label. Open only when both containment planes are off, so it precisely reflects what lean-ctx yolo produces.

pub fn secrets_protected(&self) -> bool

True when secrets still cannot leak to the provider (detection + masking both on). This stays independent of Self::level on purpose.

Trait Implementations

impl Clone for SecurityPosture

fn clone(&self) -> SecurityPosture

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityPosture

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.