Struct GovernanceEngine 

pub struct GovernanceEngine { /* private fields */ }

Implementations

impl GovernanceEngine

pub fn global() -> &'static Self

The process-wide engine, built on first use from the active profile’s <services>/governance/config.yaml.

The path is resolved here rather than through an init() seam because a OnceLock seeded before the profile bootstrap completed would pin the built-in defaults permanently, silently dropping every operator policy. Resolving lazily means the first caller — whenever that is — sees the configured chain. A profile that cannot be read falls back to GovernanceConfig::defaults, matching GovernanceConfig::load.

pub fn from_config(config: &GovernanceConfig) -> Self

Instantiate the chain from config against the inventory registry.

Configured ids with no registered factory are logged and skipped. Registered policies absent from the config are appended enabled: false, so the audit trace shows them as skipped rather than omitting them.

pub fn policies( &self, ) -> impl Iterator<Item = (&PolicyConfig, &dyn GovernancePolicy)>

The instantiated chain in evaluation order, for dashboards and UI projections.

pub fn evaluate(&self, ctx: &PolicyContext<'_>) -> Evaluation

Run the chain first-deny-wins, tracing every entry.

Entries switched off by config record a ChainEntryResult::Disabled and entries after the first deny a ChainEntryResult::Skip, both with zero duration; an empty or all-pass chain allows with MatchedBy::DefaultIncluded.

Trait Implementations

impl Debug for GovernanceEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.