Module security

Structs§

AccessPolicy: Access control toggles for guest operations.
AuthenticatedFrame: A versioned, signed vsock frame envelope.
BlocklistEntry: A single blocklist entry for command gating.
PostureCheck: Result of a single posture check.
PostureReport: Overall posture report aggregating all checks.
RateLimitPolicy: Frame rate limiting configuration.
SecurityPolicy: Per-VM security configuration, provisioned on the config drive.
SessionHello: Host → Guest: initiate authenticated session after CONNECT/OK.
SessionHelloAck: Guest → Host: acknowledge session and prove key possession.
SessionPolicy: Session lifecycle limits.
ThreatFinding: A single threat finding produced by the classifier.

ApprovalVerdict: Verdict from an approval authority (coordinator or dev-mode auto-approve).
BlocklistAction: Action to take when a blocklist entry matches.
BlocklistSeverity: Severity level for blocklist entries.
GateDecision: Decision from the command gate after evaluating a vsock command.
SecurityLayer: A security layer that can be evaluated for posture scoring.
Severity: Severity of a threat finding.
ThreatCategory: Threat categories for vsock message classification.