Module security 

Embedder-supplied security policy trait.

Caller identity is fixed by the host-function binding’s closure; Wasm code cannot forge a different caller value.

Structs

AllowAllCheck

Default policy: allows all calls, logging each to stderr so stdout carries only the program’s result.

AuditDecision

A decision observation; recording must never change authorization semantics.

Enums

CheckOutcome

Traits

SecurityCheck

Functions

default_check

denial_reason

The reason a policy denial gives caller for capability. context is the one the policy tested (SecurityCheck::audit_context), so a filesystem path is named as normalized.