Struct TaintGate 

pub struct TaintGate { /* private fields */ }

Taint gate - checks whether a tool invocation is allowed given the current taint state of the context window. Attached per-agent (as an ECS component) when the agent’s blueprint opts into taint tracking.

Implementations

impl TaintGate

pub fn new(config: SecurityConfig) -> Self

Create a new taint gate with the given security config.

pub fn disabled() -> Self

Create a disabled taint gate (no tracking, no gating).

pub fn config(&self) -> &SecurityConfig

Get the security config.

pub fn set_tool_classification( &mut self, tool_name: String, classification: ToolClassification, )

Register a tool classification override.

pub fn tool_classification(&self, tool_name: &str) -> ToolClassification

Get the classification for a tool (override first, then built-in default).

pub fn apply_mcp_overrides( &mut self, overrides: &HashMap<String, McpToolOverride>, )

Apply the [mcp_overrides] section of policy.toml to this gate.

Each override starts from the tool’s current classification and replaces only the fields it sets, keyed the same server.tool way MCP tools are named at dispatch. An unrecognized direction string keeps the existing direction and warns, rather than silently reclassifying a security property.

Called at gate construction. A later session-scoped “always allow” writes the same map through Self::set_tool_classification, so the user’s runtime decision still wins over the config file.

pub fn check_traditional( &mut self, agent_id: &str, tool_name: &str, window: &ContextWindow, ) -> GateDecision

Check the gate for a traditional-mode tool invocation.

In traditional mode, the overall taint (max across all regions) is compared against the tool’s clearance.

pub fn check_with_policy( &mut self, agent_id: &str, tool_name: &str, window: &ContextWindow, target: Option<&str>, policy: &PolicyConfig, script_checker: Option<&ScriptRuleChecker>, ) -> GateDecision

Check the gate with allowlist and scripted rule support.

This is the full gate check that runs:

1. Basic taint vs clearance check
2. If blocked, check static allowlist rules
3. If still blocked, check scripted rules (if checker provided)
4. Return final decision

pub fn record_allow( &mut self, agent_id: &str, tool_name: &str, taint: TaintLevel, clearance: TaintLevel, source: GateDecisionSource, )

Record an allow decision from the user or allowlist.

pub fn record_deny( &mut self, agent_id: &str, tool_name: &str, taint: TaintLevel, clearance: TaintLevel, source: GateDecisionSource, )

Record a deny decision (the user or a default policy denied the call).

pub fn apply_resolution( &mut self, agent_id: &str, tool_name: &str, tool_id: &str, taint: TaintLevel, clearance: TaintLevel, resolution: GateResolution, ) -> Option<(String, String)>

Apply the user’s resolution of a blocked outbound call: record the audit event and, for AlwaysAllow, raise the tool’s clearance for the rest of the run. Returns Some((tool_id, message)) when the call is denied (and must be skipped), or None when it should execute.

Synchronous so it can be unit-tested directly, keeping the async run-loop path that awaits the prompt as thin as possible.

pub fn audit_log(&self) -> &[GateEvent]

Get the audit log.

Trait Implementations

impl Clone for TaintGate

fn clone(&self) -> TaintGate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Component for TaintGate

where Self: Send + Sync + 'static,

const STORAGE_TYPE: StorageType = bevy_ecs::component::StorageType::Table

A constant indicating the storage type used for this component.

type Mutability = Mutable

A marker type to assist Bevy with determining if this component is mutable, or immutable. Mutable components will have Component<Mutability = Mutable>, while immutable components will instead have Component<Mutability = Immutable>.

fn register_required_components( _requiree: ComponentId, required_components: &mut RequiredComponentsRegistrator<'_, '_>, )

Registers required components.

fn clone_behavior() -> ComponentCloneBehavior

Called when registering this component, allowing to override clone function (or disable cloning altogether) for this component.

fn relationship_accessor() -> Option<ComponentRelationshipAccessor<Self>>

Returns ComponentRelationshipAccessor required for working with relationships in dynamic contexts.

fn on_add() -> Option<for<'w> fn(DeferredWorld<'w>, HookContext)>

Gets the on_add ComponentHook for this Component if one is defined.

fn on_insert() -> Option<for<'w> fn(DeferredWorld<'w>, HookContext)>

Gets the on_insert ComponentHook for this Component if one is defined.

fn on_discard() -> Option<for<'w> fn(DeferredWorld<'w>, HookContext)>

Gets the on_discard ComponentHook for this Component if one is defined.

fn on_remove() -> Option<for<'w> fn(DeferredWorld<'w>, HookContext)>

Gets the on_remove ComponentHook for this Component if one is defined.

fn on_despawn() -> Option<for<'w> fn(DeferredWorld<'w>, HookContext)>

Gets the on_despawn ComponentHook for this Component if one is defined.

fn map_entities<E>(_this: &mut Self, _mapper: &mut E)

where E: EntityMapper,

Maps the entities on this component using the given EntityMapper. This is used to remap entities in contexts like scenes and entity cloning. When deriving Component, this is populated by annotating fields containing entities with #[entities]

impl Debug for TaintGate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.