Enum Backend 

#[non_exhaustive]
pub enum Backend {
    Sandbox,
    Host,
}

Which backend a decision selects.

The value that used to be a boolean called granted, and the rename is the substance rather than the style. While conditions 1-2 were unbuilt there were only two outcomes — run on the host, or refuse — so “granted” answered the whole question. Now there are two backends, and the layers choose between them rather than choosing between running and not.

Nothing in this type says whether the chosen backend is available. That is deliberate: availability is a property of the machine and the build, not of the policy, and a selection that quietly became a host run because a hypervisor was missing is the silent downgrade ADR-0020 §6 exists to prevent. The runner asks; this module only ever says which one to ask.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Sandbox

A digest-pinned image in a microVM. The default.

Host

This machine, with this user’s toolchain, filesystem and credentials.

Trait Implementations

impl Clone for Backend

fn clone(&self) -> Backend

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Backend

impl Debug for Backend

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Backend

impl PartialEq for Backend

fn eq(&self, other: &Backend) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Backend