Struct SecurityConfig 

pub struct SecurityConfig {
    pub level: SecurityLevel,
    pub secret_scan: Option<SecretScanMode>,
    pub extra_forbidden_tools: Vec<String>,
}

Security level profile configuration (v0.15.14.4).

Sets a named preset of security defaults. Individual settings always override the level preset. See ta_goal::SecurityProfile::from_level for the full default table per level.

[security]
level = "mid"   # "low" (default) | "mid" | "high"

# Override individual controls beyond the level preset:
# [security.secrets]
# scan = "off"   # "off" | "warn" | "block"

# [security.forbidden_tools]
# extra = ["Bash(*aws*)", "Bash(*gcloud*)"]

Fields

level: SecurityLevel

Security level preset.

• "low" (default): Frictionless solo-developer mode.
• "mid": Sensible team defaults (sandbox on, forbidden patterns, hash chain).
• "high": High-assurance regulated mode (approval gate, HMAC chain, no WebSearch).

secret_scan: Option<SecretScanMode>

Secret scanning mode override (individual override for [security.secrets] scan).

extra_forbidden_tools: Vec<String>

Extra forbidden tool patterns added on top of the level preset.

Implementations

impl SecurityConfig

pub fn to_overrides(&self) -> SecurityOverrides

Convert to SecurityOverrides for use with SecurityProfile::from_level.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.