Struct ToolFirewall 

pub struct ToolFirewall { /* private fields */ }

Tool-boundary firewall combining input minimization, output sanitization, and format constraint validation.

The firewall processes tool call arguments before execution and tool results after execution, producing SecurityFindings compatible with the LLMTrace security pipeline.

Implementations

impl ToolFirewall

pub fn new( minimizer: ToolInputMinimizer, sanitizer: ToolOutputSanitizer, ) -> Self

Create a new firewall with the given minimizer and sanitizer.

pub fn with_defaults() -> Self

Create a firewall with sensible default configuration.

Uses default minimizer (PII stripping enabled, 10k char limit) and default sanitizer (HTML stripping enabled, 50k char limit).

pub fn set_enabled(&mut self, enabled: bool)

Enable or disable the firewall.

pub fn is_enabled(&self) -> bool

Return whether the firewall is enabled.

pub fn add_constraint(&mut self, tool_id: &str, constraint: FormatConstraint)

Add a format constraint for a specific tool.

pub fn process_input( &self, input: &str, tool_id: &str, context: &ToolContext, ) -> FirewallResult

Process tool input through the minimizer.

Returns a FirewallResult with the cleaned input, any security findings, and an action recommendation.

pub fn process_output( &self, output: &str, tool_id: &str, context: &ToolContext, ) -> FirewallResult

Process tool output through the sanitizer and format constraints.

Returns a FirewallResult with the cleaned output, any security findings, and an action recommendation.

Trait Implementations

impl Debug for ToolFirewall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ToolFirewall

fn default() -> Self

Returns the “default value” for a type.