Struct PolicyConfig 

pub struct PolicyConfig {
    pub allowlist: Vec<AllowlistRule>,
    pub mcp_overrides: HashMap<String, McpToolOverride>,
}

Complete policy configuration loaded from policy.toml.

Fields

allowlist: Vec<AllowlistRule>

Static allowlist rules.

mcp_overrides: HashMap<String, McpToolOverride>

MCP tool overrides, keyed by the name the tool is dispatched under.

That is the advertised name, <server>__<tool> sanitized by crate::mcp_names::advertised_name, because the gate looks this map up with whatever name the model called. Any other spelling is a key that matches nothing.

Implementations

impl PolicyConfig

pub fn from_toml(content: &str) -> Result<Self, String>

Parse a policy config from TOML string.

pub fn check_allowlist( &self, tool_name: &str, target: Option<&str>, taint: TaintLevel, ) -> Option<usize>

Check whether any allowlist rule matches the given invocation. Returns the index of the matching rule, if any.

Trait Implementations

impl Clone for PolicyConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicyConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PolicyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for PolicyConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicyConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyConfig