Enum KernelRequest 

pub enum KernelRequest {
    CapDelegate {
        new_cap: Capability,
        target: PluginId,
    },
    CapRevoke {
        cap_id: CapId,
    },
    SetPluginLevel {
        plugin_id: PluginId,
        level: SecurityLevel,
    },
    SetResourceLevel {
        resource_id: ResourceId,
        level: SecurityLevel,
    },
    Tick,
    RotateKey {
        new_key: Key,
    },
}

Kernel dispatch request (extractable)

All security-critical mutations go through this enum. Policy evaluation happens in the shell BEFORE dispatch.

Corresponds to Lean: inductive KernelRequest

Variants

CapDelegate

Delegate a capability to a plugin Pre-condition: Policy already approved by shell

Fields

new_cap: Capability

The new capability to delegate

target: PluginId

The plugin receiving the capability

CapRevoke

Revoke a capability (and descendants)

Fields

cap_id: CapId

The capability ID to revoke

SetPluginLevel

Update plugin security label

Fields

plugin_id: PluginId

The plugin whose level is being changed

level: SecurityLevel

The new security level to assign

SetResourceLevel

Update resource security label

Fields

resource_id: ResourceId

The resource whose level is being changed

level: SecurityLevel

The new security level to assign

Tick

Advance time

RotateKey

Rotate HMAC key (kernel-only, privileged operation)

SECURITY: Only privileged kernel code should invoke this. The current key becomes the previous key for grace period verification.

Fields

new_key: Key

The new key to use for sealing capabilities

Trait Implementations

impl Clone for KernelRequest

fn clone(&self) -> KernelRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.