Module policy 

The policy classifier: every tool call is allowed, needs approval, or is denied — decided by code, before the call.

It decides which calls run; what an allowed command can reach is the OS sandbox’s job (crate::sandbox).

Structs

Policy

The classifier for one project.

Rejection

A person’s “no”, with the reason the model is told.

Enums

Class

The kind of object a decision covers.

Decision

What the engine does with a call.

Object

What a person’s decision covers: exactly one resolved object — never the request’s spelling and never a pattern (constitution V). A path is the canonical file a write reaches; a command is its exact argv with the directory it runs in and the executable it resolves to; an MCP tool is its name with the digest of its definition.

Constants

AUTOPILOT_DENIED

Why an autopilot run refused a call that would have asked a person.

MCP_PREFIX

The prefix of an MCP tool’s name as the model sees it (crate::mcp).

NOT_FOUND

What an executable that cannot be found is recorded as.

Functions

argv_of

The argv a run_command call asks for (strings only).

argv_sha256

Hex SHA-256 over argv as a JSON array.

prefix_matches

Whether argv starts with prefix, a prefix of at least two elements (a bare program allows any argument, so it is never a prefix).

prefix_refusal

Why a prefix entry is refused, if it is: a bare program allows any argument.