Struct SandboxConfig 

pub struct SandboxConfig {
    pub bounds_check: bool,
    pub deadline_check: bool,
    pub capability_check: bool,
    pub div_check: bool,
}

Compile-time sandbox configuration. Mirrors the cranelift backend’s SandboxConfig field-for-field so a side-by-side comparison of the two AOT backends shares the same knob surface.

Production LLVM buffer entries emit the guard surface unconditionally: arena bounds checks, div/mod guards, checked signed Int arithmetic, capability gates, dynamic host-call trap lifting, and deterministic step-budget fuel. This struct stays field-compatible with cranelift’s configuration so tests and host code can describe the same policy intent across backends. The booleans are bench/debug intent records for LLVM today; they should not be used to create a trusted execution posture for untrusted source.

Fields

bounds_check: bool

When true, host-visible memory access should be guarded against the arena byte length. LLVM buffer entries currently emit these guards unconditionally.

deadline_check: bool

When true, resource exhaustion should be enforced. LLVM uses deterministic step-budget fuel configured on LlvmAotEvaluator rather than reading this bool directly as a wall-clock deadline switch.

capability_check: bool

When true, Op::CheckCap bakes the caps-bitmask test into the emitted object. The codegen/call.rs lowering already emits it unconditionally for a non-NO_CAPABILITY_BIT bit; this flag is the host-facing intent record.

div_check: bool

When true, Op::Div / Op::Mod emit an explicit divisor-zero guard before LLVM’s sdiv / srem (whose div-by-zero is UB). The codegen/arith.rs lowering already emits it; this flag is the host-facing intent record.

Implementations

impl SandboxConfig

pub fn unchecked() -> Self

Disable all four guards. Bench-only — production code paths should never call this.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl Eq for SandboxConfig

impl PartialEq for SandboxConfig

fn eq(&self, other: &SandboxConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SandboxConfig