Struct Entitlements 

pub struct Entitlements {
    pub network: NetworkEntitlement,
    pub filesystem: FilesystemEntitlement,
    pub processes: ProcessesEntitlement,
    pub syscalls: SyscallsEntitlement,
    pub limits: LimitsEntitlement,
    pub llm: LlmEntitlement,
    pub fail_closed_on_sandbox_error: bool,
}

Fields

network: NetworkEntitlement

filesystem: FilesystemEntitlement

processes: ProcessesEntitlement

syscalls: SyscallsEntitlement

limits: LimitsEntitlement

llm: LlmEntitlement

LLM call permission. Default = Allowed (back-compat). Bridges set to Off so the supervisor refuses to construct an LLM client.

fail_closed_on_sandbox_error: bool

When true (the default), a sandbox apply failure is fatal: the agent refuses to start rather than running advisory-only (unconfined). Set to false only for development or trusted-workstation agents that intentionally run without kernel sandbox enforcement.

Trait Implementations

impl Clone for Entitlements

fn clone(&self) -> Entitlements

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Entitlements

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Entitlements

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Entitlements

fn eq(&self, other: &Entitlements) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Entitlements

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Entitlements