pub struct ExecRoutes {
pub ready: Vec<FleetFacts>,
pub blocked: Vec<FleetFacts>,
}Expand description
Routes for one denied binary, split by whether they can be used right now.
The split is the security design, not presentation: ready is safe to put
in an agent’s context, blocked is for the HUMAN. A list of “powerful
fleets you are not allowed to use” handed to a prompt-injected agent is an
attack map; handed to the user it is the grant path that stops them from
disabling the sandbox out of frustration.
Fields§
§ready: Vec<FleetFacts>§blocked: Vec<FleetFacts>Trait Implementations§
Source§impl Clone for ExecRoutes
impl Clone for ExecRoutes
Source§impl Debug for ExecRoutes
impl Debug for ExecRoutes
Auto Trait Implementations§
impl Freeze for ExecRoutes
impl RefUnwindSafe for ExecRoutes
impl Send for ExecRoutes
impl Sync for ExecRoutes
impl Unpin for ExecRoutes
impl UnsafeUnpin for ExecRoutes
impl UnwindSafe for ExecRoutes
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more