Struct ProcessAllowlist 

pub struct ProcessAllowlist { /* private fields */ }

The programs a ProcessRunner may start.

Configuration, never code: a product declares its allowed programs (git, its configured editors, its terminal launchers). Every implementation must call ProcessAllowlist::check before handing a program to the operating system — the contract test enforces this.

Implementations

impl ProcessAllowlist

pub fn new(programs: impl IntoIterator<Item = impl Into<String>>) -> Self

pub fn allows(&self, program: &str) -> bool

pub fn check(&self, program: &str) -> Result<()>

Reject a program not in the allowlist.

The shared gate every implementation must call, so an allowlist violation can never reach the operating system. The contract test verifies that implementations actually delegate to this check.

pub fn entries(&self) -> &[String]

The programs currently allowed.

Trait Implementations

impl Clone for ProcessAllowlist

fn clone(&self) -> ProcessAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProcessAllowlist

fn default() -> ProcessAllowlist

Returns the “default value” for a type.