pub struct UnattendedDenial {
pub tool: String,
pub args_json: String,
pub reason: String,
pub missing_capabilities: Vec<String>,
}Expand description
A single gated call an unattended turn denied fail-closed (#623).
Surfaced out of the turn so the control plane can append the durable audit event. Carries the facts the turn knows — the tool, the arguments it was called with, the gate’s reason, and the capability shortfall; the control plane digests the args and signs the audit record.
Fields§
§tool: StringThe tool whose call was denied (the raw machine identifier, the field of record for audit).
args_json: StringThe arguments the model proposed, as a JSON string (opaque here; the control plane digests them for the audit record so the raw values are not re-signed into the trail).
reason: StringThe gate’s plain-language reason, when the escalation was the containment path (the call required a capability untrusted content revoked); empty for an ordinary policy/sandbox gate.
missing_capabilities: Vec<String>The stable kebab-case names of the capabilities the gate found required-but-not-granted. Empty for an ordinary policy/sandbox gate.
Trait Implementations§
Source§impl Clone for UnattendedDenial
impl Clone for UnattendedDenial
Source§fn clone(&self) -> UnattendedDenial
fn clone(&self) -> UnattendedDenial
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for UnattendedDenial
impl Debug for UnattendedDenial
Source§impl Default for UnattendedDenial
impl Default for UnattendedDenial
Source§fn default() -> UnattendedDenial
fn default() -> UnattendedDenial
impl Eq for UnattendedDenial
Source§impl PartialEq for UnattendedDenial
impl PartialEq for UnattendedDenial
impl StructuralPartialEq for UnattendedDenial
Auto Trait Implementations§
impl Freeze for UnattendedDenial
impl RefUnwindSafe for UnattendedDenial
impl Send for UnattendedDenial
impl Sync for UnattendedDenial
impl Unpin for UnattendedDenial
impl UnsafeUnpin for UnattendedDenial
impl UnwindSafe for UnattendedDenial
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
key and return true if they are equal.Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
Source§fn in_current_span(self) -> Instrumented<Self> ⓘ
fn in_current_span(self) -> Instrumented<Self> ⓘ
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more