Module access_manager 

Access Manager — least-privilege security for agents.

Inspired by OWASP Agentic AI security guidelines:

• Least privilege by default
• Agent identity and audit logging
• Sandbox boundaries (path restrictions)
• Tool access control (which agent can use which tools)

Every agent starts with minimal permissions and must be explicitly granted access to tools, paths, and network resources.

Structs

AccessManager

Access Manager.

AgentPermissions

Permissions for a single agent.

AuditEntry

An entry in the security audit log.

PendingApproval

Human-in-the-loop approval request.

PermissionUpdate

Update struct for permission changes (partial updates).

RbacAuditEntry

RBAC audit entry — records authorization decisions.

RbacManager

RBAC Manager — manages roles, permissions, and HitL approvals.

RbacPolicy

RBAC policy defining what a role can do.

Enums

Action

Actions that can be authorized by RBAC.

ApprovalStatus

Status of a HitL approval request.

Role

Roles for role-based access control (3-tier model).

Subject

Subject — who is accessing the system.