Module capability 

Capability names and sets: the contract for gating privileged operations.

The kernel defines capability identity, trust levels, read policy, and cross-cutting kernel capability names. Libraries mint behavior-specific capability names with CapabilityName::new in their own crates.

Structs

CapabilityName

The identity of a capability: the token an operation requires to run.

CapabilitySet

A set of granted capabilities, used as the capability state of a Cx.

GrantSeat

A host-only capability-grant seat: the authority to grant a capability into a Cx.

ReadPolicy

The trust level and capability set governing a read.

Enums

TrustLevel

The trust level of a source, gating capabilities beyond mere possession.

Functions

control_capture_capability

The capability gating control-stack capture (control.capture).

control_multishot_capability

The capability gating multi-shot continuations (control.multishot).

control_prompt_capability

The capability gating control prompts (control.prompt).

control_resume_capability

The capability gating continuation resumption (control.resume).

diminish

Computes the diminished capability set for an explicitly narrowed run.

eval_fabric_capability

The capability gating use of the eval fabric (eval.fabric).

eval_remote_capability

The capability gating remote evaluation (eval.remote).

fact_private_capability

The capability gating access to private facts (kernel.fact.private).

list_force_unbounded_capability

The capability gating unbounded list forcing (list.force.unbounded).

macro_expand_capability

The capability gating macro expansion (macro.expand).

macro_expand_compile_capability

The capability gating compile-phase macro expansion (macro.expand.compile).

macro_expand_eval_capability

The capability gating eval-phase macro expansion (macro.expand.eval).

macro_expand_read_capability

The capability gating read-phase macro expansion (macro.expand.read).

macro_expansion_capability_for_phase

The phase-specific capability required to run macro expansion.

native_dynamic_load_capability

The capability gating native dynamic library loading (loader.native).

read_construct_capability

The capability gating read-time construction (read-construct).

read_eval_capability

The capability gating read-time evaluation (read-eval).

registry_catalog_read_capability

The capability gating registry catalog reads (registry.catalog.read).