Module policy 

Provider data policy (DLP vocabulary carried on ServiceDescriptor). Provider data policy — what content may leave the machine for a provider.

DataPolicy is a field of ServiceDescriptor, so this vocabulary lives in provider and stays free of engine concerns.

use llm_kernel::provider::{DataPolicy, ProviderIndex, Sensitivity};

let catalog = ProviderIndex::embedded();
let policy = catalog
    .get("openai")
    .map(DataPolicy::default_for)
    .unwrap_or_default();
// `Sensitivity` is ordered: Public < Internal < Confidential < Restricted.
assert!(Sensitivity::Restricted > Sensitivity::Public);
assert_eq!(policy.image, llm_kernel::provider::ImagePolicy::Allow);

Structs

DataPolicy

Per-provider data-loss-prevention policy, carried on ServiceDescriptor.

PolicyThreshold

One step of the sensitivity-to-action ladder.

Enums

ImagePolicy

Whether binary (image) payloads may be sent to the provider.

PolicyAction

Action to take on content bound for a provider.

Sensitivity

Overall sensitivity grade of scanned content.