Enum Capability 

pub enum Capability {
    Pure,
    Ambient,
    FsRead,
    FsWrite,
    Env,
    HostInfo,
    Net,
    ClusterCredentials,
    Secrets,
    Subprocess,
    ModuleLoad,
}

What a family of primitives can reach outside the process.

Ordered by blast radius, and deliberately coarse: a finer taxonomy invites arguments about which bucket a form belongs in, and the whole value here is that the answer is obvious.

Variants

Pure

Computation only. No syscall reaches outside this process.

Ambient

Reads the clock or the random pool. Non-deterministic, but observes nothing it could not have been told.

FsRead

Reads the filesystem.

FsWrite

Writes or deletes on the filesystem.

Env

Reads or writes process environment variables.

HostInfo

Reads host identity — hostname, username, platform.

Net

Opens network connections, or listens.

ClusterCredentials

Reads Kubernetes service-account credentials.

Secrets

Decrypts secrets.

Subprocess

Starts a subprocess.

ModuleLoad

Loads and evaluates another module.

Implementations

impl Capability

pub fn escapes_process(self) -> bool

Does this capability reach outside the process at all?

The gate in this crate’s tests keys on exactly this, so a new capability variant is classified once, here, rather than in every place that asks the question.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Capability

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Capability

impl Hash for Capability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Capability

fn cmp(&self, other: &Capability) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Capability

fn partial_cmp(&self, other: &Capability) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for Capability