Struct FleetHitl 

pub struct FleetHitl {
    pub mode: Option<Unanswered>,
    pub auto_approve_tiers: Vec<RiskTier>,
}

Per-fleet approval policy. A floor, never a grant: every field here can only make an outcome stricter or change WHO waits — none of them approves anything, and there is deliberately no “auto-approve” knob (that is what --yes is, and it stays unreachable from unattended fleet paths).

Fields

mode: Option<Unanswered>

What an unanswered Ask-tier gate does. Absent → auto: defer when no TTY is attached, wait when one is. Set it explicitly when the TTY is a bad proxy for “somebody is watching” — a monitored ops fleet wants wait even headless; a fleet that must never reach for a human wants deny.

auto_approve_tiers: Vec<RiskTier>

Risk tiers this fleet’s owner has taken standing responsibility for: the gate approves them without asking, and records the auto-approval on the channel so the run is still auditable.

An explicit LIST, not a ceiling — RiskTier’s ordering would make up_to: spend quietly cover network-egress too, and a grant nobody meant to write is the whole failure mode this feature has to avoid. crate::hitl::tier_may_be_granted bounds what may appear here.

Implementations

impl FleetHitl

pub fn validate(&self) -> Result<(), String>

Reject a policy that grants more than config is allowed to grant.

Loud at load time rather than silently ignored at the gate: a user who wrote destructive here believes it took effect, and the gap between that belief and the truth is where the damage lives.

Trait Implementations

impl Clone for FleetHitl

fn clone(&self) -> FleetHitl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FleetHitl

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FleetHitl

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for FleetHitl

fn eq(&self, other: &FleetHitl) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for FleetHitl

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FleetHitl