Module policy 

The policy classifier: every tool call is allowed, needs approval, or is denied — decided by code, before the call.

It decides which calls run; what an allowed command can reach is the OS sandbox’s job (crate::sandbox).

Structs

Policy

The classifier for one project.

Rejection

A person’s “no”, with the reason the model is told.

Enums

Decision

What the engine does with a call.

Grant

The class of calls a person’s decision covers: writing one path (any content — content hashes would make every retry a new approval), or one exact command.