Expand description
Declaration-driven gate for capability-scoped operations.
The gate contains no domain policy: callers provide a manifest declaration, exact approval verifier/use adapters, a record sink, and the performer.
Structs§
- Approval
- Approval presented for a reviewed operation.
- Gate
Context - Dependencies used to guard one operation.
- Gate
Record - Audit record emitted after successful first performance.
- Operation
Declaration - Canonical operation declaration supplied by a domain manifest.
Enums§
- Approval
Decision - Explicit approval decision.
- Execution
Mode - Policy label for an operation. None implies reversibility.
- Sink
Failure Policy - Policy for a record-sink failure after the operation performed.
Traits§
- Approval
Use - Atomically consumes a verified approval once.
- Approval
Verifier - Validates approval authenticity and validity without consuming it.
- Gate
Record Sink - Receives gate records.
Functions§
- guard_
operation - Guard and resolve an effect, returning the kernel’s result reference directly.