Enum Defaults 

pub enum Defaults {
    All(Verdict),
    PerKind(BTreeMap<String, Verdict>),
}

Fallback verdicts when no rule matches: one verdict for everything, or a map from action kind (shell, fs.read, fs.write, net, fetch, web.search, env.read, env.set, mcp, or "*") to a verdict; a fetch without its own entry takes the net one. This is how “outbound network is deny-by-default” is expressed, because deny rules are absolute and cannot be punched through by allow rules (ADR-002).

Variants

All(Verdict)

The same verdict for every kind.

PerKind(BTreeMap<String, Verdict>)

A verdict per kind name (net, fs.read, …), with * as the fallback.

Implementations

impl Defaults

pub fn for_kind(&self, kind: Kind) -> (Verdict, String)

Verdict and synthetic rule id (default or default.<kind>) for a kind.

Trait Implementations

impl Clone for Defaults

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Defaults

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Defaults

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Defaults

impl PartialEq for Defaults

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Defaults

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Defaults