Struct RuleEvaluator 

pub struct RuleEvaluator { /* private fields */ }

Enforces per-tool rules declared in nanny.toml under [tools.].

Currently enforces:

• max_calls: deny once a tool has been called max_calls times

Always runs after ToolPermissionPolicy: compose them with ChainPolicy.

Implementations

impl RuleEvaluator

pub fn new(max_calls: HashMap<String, u32>) -> Self

pub fn rule_name_for(&self, tool: &str) -> Option<String>

The engine-side rule governing tool, if any.

A max_calls cap is a rule like any other, so a call it evaluated and allowed belongs in that call’s cleared_by alongside the SDK’s rules. Otherwise the engine’s own control is the one control that leaves no evidence of having operated.

Trait Implementations

impl Policy for RuleEvaluator

fn evaluate(&self, ctx: &PolicyContext) -> PolicyDecision