pub struct CallSite {
pub caller: Principal,
pub callee_method: MethodPath,
}Expand description
Identifies a single edge in the call graph at the moment a policy runs.
Constructed by the framework at the dispatch point (route_to_child in
plexus-core, wired in by AUTHLANG-3) and passed to
ForwardPolicy::forward. Policies inspect it to make routing-aware
decisions (e.g., “PassThrough only when callee is in audit.*”); the
three built-in policies ignore it.
Per AUTHZ-0 vocabulary: caller and callee, NOT parent/child.
Fields§
§caller: PrincipalThe framework-stamped immediate-caller principal. Sealed value; the framework auto-stamps it at dispatch per AUTHZ-0 principle 6.
callee_method: MethodPathThe fully qualified method path on the callee being invoked
(e.g., solar.earth.luna.info).
Implementations§
Source§impl CallSite
impl CallSite
Sourcepub fn new(caller: Principal, callee_method: MethodPath) -> CallSite
pub fn new(caller: Principal, callee_method: MethodPath) -> CallSite
Construct a CallSite from its sealed components.
CallSite is a thin coupling of a sealed Principal with a
validated MethodPath. It is not itself sealed beyond the seals on
its fields: a downstream crate that already holds a Principal (it
cannot — the constructors are pub(crate)) and a valid
MethodPath could synthesize one. The construction path that
matters in practice is the framework’s route_to_child (AUTHLANG-3),
which holds the only access to a freshly stamped Principal.