Struct Envelope 

pub struct Envelope {
    pub scopes: Vec<String>,
    pub network: NetworkPolicy,
    pub filesystem: Vec<FilesystemRule>,
    pub subprocess: Vec<SubprocessRule>,
    pub safety: Safety,
    pub sensitive_invocations: Vec<SensitivePredicate>,
    pub data_classification: DataClassification,
}

Executable permission envelope declared by a tool.

Fields

scopes: Vec<String>

Authz scopes consumed by this tool. Empty means no named scope is required.

network: NetworkPolicy

Network egress policy. Defaults to deny all egress.

filesystem: Vec<FilesystemRule>

Filesystem access rules. Empty denies filesystem access.

subprocess: Vec<SubprocessRule>

Subprocess invocation rules. Empty denies subprocess execution.

safety: Safety

Safety classification for executable behavior.

sensitive_invocations: Vec<SensitivePredicate>

Input predicates that require human approval before invocation.

data_classification: DataClassification

Informational data classification used for redaction/observability.

Trait Implementations

impl Clone for Envelope

fn clone(&self) -> Envelope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Envelope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Envelope

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Envelope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Envelope

fn eq(&self, other: &Envelope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Envelope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Envelope