Enum PolicyError 

#[non_exhaustive]
pub enum PolicyError {
    UntrustedOrigin {
        command_ref: CommandRef,
    },
    ForbiddenRiskClass {
        command_ref: CommandRef,
    },
    Denied {
        command_ref: CommandRef,
        reason_key: String,
    },
    Unavailable,
    BudgetExhausted {
        limit: String,
    },
}

Policy evaluation refused a command (spec §14.3, I12).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

UntrustedOrigin

The command origin is not trusted enough for the policy.

Fields

command_ref: CommandRef

The command.

ForbiddenRiskClass

The risk class is forbidden in the current configuration (e.g. sandbox).

Fields

command_ref: CommandRef

The command.

Denied

The policy engine denied the command with a reason key.

Fields

command_ref: CommandRef

The command.

reason_key: String

Key of the user-facing reason.

Unavailable

The policy source could not be consulted; the runtime fails closed.

BudgetExhausted

The turn spent the resource budget its orchestration mode allows (spec §11.1), and stopped rather than continuing on credit.

limit is the stable snake-case name of the bound that ran out, so an operator can tell “the model was called too often” from “the turn took too long” without parsing a sentence. The runtime that raises it owns the vocabulary of names; the library only carries it.

Fields

limit: String

Stable snake-case name of the bound that ran out.

Trait Implementations

impl Clone for PolicyError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PolicyError

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for PolicyError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PolicyError

impl Error for PolicyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<PolicyError> for OrchestratorError

fn from(value: PolicyError) -> Self

Converts to this type from the input type.

impl PartialEq for PolicyError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicyError

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyError