pub struct Decision {
pub verdict: Verdict,
pub rules: Vec<String>,
pub reasons: Vec<String>,
pub context: Vec<String>,
pub notice: Option<Box<Notice>>,
}Expand description
A verdict with the rule ids and human-readable reasons that produced it.
rules/reasons describe only the matches that carry the final verdict.
Matches with a weaker verdict (e.g. an allow on git status inside a command
that was denied for touching ~/.ssh) are kept in context so the user still
sees the full picture without the headline being noisy.
Fields§
§verdict: VerdictThe strictest verdict across the matched rules.
rules: Vec<String>Ids of the rule groups that produced verdict, in evaluation order, de-duplicated.
reasons: Vec<String>One line per rule in rules.
context: Vec<String>Matches that did not determine the verdict (weaker outcomes), for display/audit.
notice: Option<Box<Notice>>How the agent and its person are told about a deny or review
(ADR-059), when the rule or OpenMoat’s own check that decided it has a
title. Presentation only: the engine never sets it, no decision reads
it, and it is never serialised, so JSON output and the audit log stay
as they were.