Struct Caveats 

pub struct Caveats {
    pub fs_read: Scope<String>,
    pub fs_write: Scope<String>,
    pub exec: Scope<String>,
    pub net: Scope<String>,
    pub max_calls: CountBound,
    pub valid_for_generation: Scope<u64>,
}

The capability set an agent holds — one element of the authority meet-semilattice. See the module docs.

Fields

fs_read: Scope<String>

Filesystem paths the agent may read.

fs_write: Scope<String>

Filesystem paths the agent may write.

exec: Scope<String>

Commands the agent may execute.

net: Scope<String>

Network hosts the agent may reach.

max_calls: CountBound

Upper bound on tool calls this authority permits.

valid_for_generation: Scope<u64>

Generation counters this authority is valid for (causal, not wall-clock — a caveat keys on “flight N”, never on time).

Implementations

impl Caveats

pub fn top() -> Caveats

⊤ — unrestricted authority on every axis. Equivalent to “no caveats”, i.e. the user’s full authority.

pub fn leq(&self, other: &Caveats) -> bool

self ⊑ other — does self grant no more authority than other on every axis? This is the attenuation check: a delegated child’s caveats must be ⊑ its parent’s.

pub fn meet(&self, other: &Caveats) -> Caveats

self ⊓ other — the greatest lower bound, axis by axis. This is how authority composes along a delegation chain; it can never amplify.

Trait Implementations

impl CaveatsExt for Caveats

fn permits_fs_read(&self, path: &str) -> bool

Does this authority permit reading path?

fn permits_fs_write(&self, path: &str) -> bool

Does this authority permit writing path?

fn permits_exec(&self, cmd: &str) -> bool

Does this authority permit executing cmd?

fn permits_net(&self, host: &str) -> bool

Does this authority permit a network call to host?

impl Clone for Caveats

fn clone(&self) -> Caveats

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Caveats

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Caveats

fn default() -> Caveats

Absence of caveats is ⊤ (unrestricted) — the back-compatible default so an AgentMetadata with no declared caveats keeps today’s behavior.

impl<'de> Deserialize<'de> for Caveats

fn deserialize<__D>( __deserializer: __D, ) -> Result<Caveats, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Caveats

impl PartialEq for Caveats

fn eq(&self, other: &Caveats) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Caveats

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Caveats