Struct SignalPolicy 

pub struct SignalPolicy {
    pub sigterm_grace_seconds: u32,
    pub sigkill_force: bool,
    pub sighup_strategy: SighupStrategy,
    pub start_suspended: bool,
}

Signal policy — how the Process responds to signals.

Fields

sigterm_grace_seconds: u32

Grace before escalating SIGTERM → SIGKILL.

sigkill_force: bool

Permit force-reap via SIGKILL (default: allow).

sighup_strategy: SighupStrategy

How SIGHUP is handled.

start_suspended: bool

Start suspended — requires SIGCONT to transition past Forking.

Implementations

impl SignalPolicy

pub fn has_sighup_strategy(&self, kind: SighupStrategy) -> bool

Closed-set-driven presence probe — does this SignalPolicy carry the given SighupStrategy discriminator on its Self::sighup_strategy slot? The ONE substrate primitive that owns the (SignalPolicy, SighupStrategy) -> bool scalar-carrier walk shape.

Third representation kind on the presence-probe axis

The workspace-wide closed-set-driven presence-probe algebra spans three underlying representation kinds; every downstream consumer composes through the SAME has(kind: K) -> bool shape regardless of the field’s Rust type:

• Option-slot (populated-slot semantics) — crate::intent::Intent::has and crate::lifetime::Lifetime::has, both bodies kind.select(self).is_some() over a tagged-union parent whose discriminator’s select projects onto an Option<&V>.
• Slice (walk-a-Vec semantics) — crate::boundary::ConditionSliceExt::has_kind on &[Condition] and crate::spec::DependsOnSliceExt::has_must_reach on &[DependsOn], both bodies self.iter().any(|c| c.kind == kind) over a per-entry discriminator field.
• Scalar (variant-equality semantics) — THIS primitive on spec.signals.sighup_strategy, body self.sighup_strategy == kind over a non-Option, non-Vec closed-set-discriminator field. SighupStrategy is a #[derive(DeriveClosedSet)] implementor with a Default impl, so the field is ALWAYS one of the ALL variants — there is no absent state to detect, and the probe answers “does the carrier’s variant equal this discriminator” rather than “is this slot populated”.

Semantics — VARIANT match, not POPULATED slot

has_sighup_strategy(kind) returns true iff self.sighup_strategy == kind. On a SignalPolicy::default (sighup_strategy: SighupStrategy::default() = Reconverge) the probe returns true for SighupStrategy::Reconverge and false for every other variant — distinct from the Option-slot axis where a default carrier returns false for EVERY kind. The SighupStrategy::default arm’s answer is legitimate operator signal: a Process that left :signals :sighupStrategy at the substrate default IS configured for Reconverge, and a :requires (sighup-Reconverge) should pass; only an operator who deliberately overrode the strategy to Restart or Noop fails the tag on this axis.

Sibling to the presence-probe algebra

Same shape (has(kind)), same axis (closed-set discriminator on a ProcessSpec field), same operator-facing answer (does this spec carry this discriminator on this axis). A future unification (a trait for closed-set-driven presence probes that admits all three representation kinds — Option-slot, slice, scalar) lands as ONE peer trait with every current implementor picking up the trait default in lockstep.

Compounding

A future closed-set-discriminator scalar field on ProcessSpec (or any of its nested structs) that wants a <prefix>-<kind> require-tag family — a verification-phase-<kind> on spec.compliance.<binding>.phase, a routing-form-<kind> on spec.routing.as_ref().map(|r| r.form), a future intent-kind scalar discriminator on any scalar-enum spec field — lands as ONE peer inherent method with the same one-line self.<field> == kind body and routes through the same strip_and_classify_prefixed_kind::<K, _> shape in tatara-check.

Theory anchor: THEORY.md §II.1 invariant 5 — composition preserves proofs; the scalar-carrier presence-probe body lives at ONE substrate site so every downstream (sighup-<kind> require-tag family in tatara-check, closed-set audit dispatchers, future variant additions on SighupStrategy) binds through the SAME shape rather than restating the signals.sighup_strategy == kind closure body at each callsite. THEORY.md §VI.1 — generation over composition; a future SighupStrategy variant (a Suspend that maps SIGHUP onto crate::phase::ProcessPhase::Zombie via SighupStrategy::sighup_target) lands at ONE ALL entry + ONE as_str arm on the closed set and the probe picks it up mechanically without further per-consumer edits.

Trait Implementations

impl Clone for SignalPolicy

fn clone(&self) -> SignalPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignalPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SignalPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SignalPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for SignalPolicy

fn schema_name() -> String

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn is_referenceable() -> bool

Whether JSON Schemas generated for this type should be re-used where possible using the $ref keyword.

impl Serialize for SignalPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.