Struct DefaultPolicy 

pub struct DefaultPolicy;

Default permission policy.

Rules

Scope/Action	Standard	Elevated
Global signal	Denied	Allowed
Channel signal	Allowed	Allowed
Destructive ops	Denied	Allowed
Command exec	Denied	Allowed
Spawn child/runner	Denied	Allowed

Security Model

Command safety is enforced at the OS sandbox layer (SandboxPolicy), not by pattern-matching commands. This policy controls WHO can act (session-based), while SandboxPolicy controls WHERE actions reach.

Audit Logging

All permission checks are logged for audit:

• Allowed operations: debug level
• Denied operations: warn level

Trait Implementations

impl Clone for DefaultPolicy

fn clone(&self) -> DefaultPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DefaultPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DefaultPolicy

fn default() -> DefaultPolicy

Returns the “default value” for a type.

impl PermissionChecker for DefaultPolicy

fn check_command( &self, session: &Session, grants: &dyn GrantPolicy, cmd: &str, ) -> CommandCheckResult

Check command with dynamic grants and HIL approval support.

Flow:

1. Reject empty commands
2. Check dynamic grants (via GrantPolicy) -> Allowed
3. Check elevated session -> Allowed
4. Otherwise -> RequiresApproval (non-elevated session)

Command safety is enforced at the OS sandbox layer, not here. This method only controls WHO can execute, not WHAT can be executed.

impl PermissionPolicy for DefaultPolicy

fn can_signal(&self, session: &Session, scope: &SignalScope) -> bool

Check if session can send a signal with the given scope.

fn can_destructive(&self, session: &Session, action: &str) -> bool

Check if session can perform a destructive operation.

fn can_execute_command(&self, session: &Session, cmd: &str) -> bool

Check if session can execute a shell command.

fn can_spawn_child(&self, session: &Session) -> bool

Check if session can spawn a child entity.

fn can_spawn_runner(&self, session: &Session) -> bool

Check if session can spawn a runner (parallel execution).

fn check_command_permission( &self, session: &Session, cmd: &str, ) -> CommandPermission

Check command with granular permission result.

impl Copy for DefaultPolicy