Module access_manager 

Access Manager — least-privilege security for agents.

Inspired by OWASP Agentic AI security guidelines:

• Least privilege by default
• Agent identity and audit logging
• Sandbox boundaries (path restrictions)
• Tool access control (which agent can use which tools)

Every agent starts with minimal permissions and must be explicitly granted access to tools, paths, and network resources.

Structs

AccessDenied

Authorization denial — includes the layer, reason, and user-facing suggestion.

AccessGate

Single entry point for all authorization decisions.

AccessManager

Access Manager — least-privilege security for agents.

AgentContext

Agent security context — unforgeable proof of agent identity.

AgentPermissions

Permissions for a single agent.

AuditEntry

An entry in the security audit log.

PendingApproval

Human-in-the-loop approval request.

PermissionUpdate

Update struct for permission changes (partial updates).

RbacAuditEntry

RBAC audit entry — records authorization decisions.

RbacManager

RBAC Manager — manages roles, permissions, and HitL approvals.

RbacPolicy

RBAC policy defining what a role can do.

TracingAuditSink

Minimal audit sink that logs to tracing — used as default when no file sink is configured.

TrailAuditSink

Production audit sink: Merkle chain + async JSONL file writer.

Enums

Action

Actions that can be authorized by RBAC.

ApprovalStatus

Status of a HitL approval request.

AuditEvent

Unified security audit event.

CheckRequest

Authorization check request — specifies what is being accessed.

DenyLayer

Which security layer produced the deny decision.

PathMode

Path access mode for permission checks.

Role

Roles for role-based access control (3-tier model).

Subject

Subject — who is accessing the system.

Traits

AuditSink

Destination for all security audit events.