Enum ManagedConfigDecision 

pub enum ManagedConfigDecision {
    PassThrough {
        key: String,
    },
    Allow {
        entry_id: String,
        entry_version: u64,
        resource_type: String,
        managed: bool,
        mutability: Mutability,
        matched_action: String,
        matched_resource: String,
        evidence: EvidenceRequirement,
    },
    Deny {
        entry_id: String,
        entry_version: u64,
        resource_type: String,
        managed: bool,
        mutability: Mutability,
        matched_action: String,
        matched_resource: String,
        reason: DenyReason,
    },
}

Outcome of a managed-config write check.

Variants

PassThrough

Key is not governed by a managed registry entry. Caller should proceed with ordinary policy checks against config:write (etc.).

Fields

key: String

Allow

Key is managed and the caller satisfied both the structural and policy gates. Caller may proceed; the returned evidence requirement tells the Control Event Ledger how much detail to persist.

Fields

entry_id: String

entry_version: u64

resource_type: String

managed: bool

mutability: Mutability

matched_action: String

matched_resource: String

evidence: EvidenceRequirement

Deny

Key is managed and the caller failed one of the gates. Carries enough metadata for Control Event emission.

Fields

entry_id: String

entry_version: u64

resource_type: String

managed: bool

mutability: Mutability

matched_action: String

matched_resource: String

reason: DenyReason

Implementations

impl ManagedConfigDecision

pub fn permitted(&self) -> bool

Convenience: did this decision permit the write (PassThrough or Allow)? Callers that just want a boolean gate use this; callers that need to emit Control Events match on the full variant.

Trait Implementations

impl Clone for ManagedConfigDecision

fn clone(&self) -> ManagedConfigDecision

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ManagedConfigDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for ManagedConfigDecision

fn eq(&self, other: &ManagedConfigDecision) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ManagedConfigDecision

impl StructuralPartialEq for ManagedConfigDecision