Struct PolicySnapshot 

#[non_exhaustive]
pub struct PolicySnapshot {
    pub default_policy: CommandPolicy,
    pub forbidden_risk_classes: Vec<RiskClass>,
    pub max_direct_risk: RiskClass,
    pub allow_text_resolution_for_low_risk: bool,
}

Point-in-time policy configuration the reducer evaluates against.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

default_policy: CommandPolicy

Policy for commands the domain did not classify.

forbidden_risk_classes: Vec<RiskClass>

Risk classes that may never execute (e.g. in a sandbox: everything above ReversibleLowRisk).

max_direct_risk: RiskClass

Highest risk a command may carry while originating from an untrusted origin such as CommandOrigin::DirectSafeUserAct. Default ReversibleLowRisk (I12).

The setting may only tighten: origin_satisfies refuses anything above ReversibleLowRisk from an untrusted origin whatever the snapshot says.

allow_text_resolution_for_low_risk: bool

Whether low-risk interactions may be resolved from interpreted text when their stored policy permits it (spec §13.2 rule 8).

Implementations

impl PolicySnapshot

pub fn conservative() -> Self

The default snapshot: conservative default policy, nothing forbidden, direct acts up to ReversibleLowRisk, text resolution allowed for low-risk cards.

There is no “fail open” setting: when the policy source cannot be consulted the runtime has no snapshot to consult either and must return PolicyError::Unavailable (I19).

pub fn sandbox() -> Self

A snapshot for sandboxed, reversible domains: everything above ReversibleLowRisk is forbidden (spec §11.4).

pub fn is_risk_forbidden(&self, risk: RiskClass) -> bool

Returns true when the risk class may never execute.

pub fn decide( &self, command_ref: CommandRef, policy: &CommandPolicy, origin: &CommandOrigin, ) -> PolicyDecision

Evaluates one command.

The decision answers two questions: may this command execute with the origin it carries, and if not, which card would authorize it. A policy only somebody other than the end user can satisfy (ConfirmationPolicy::HumanProfessionalReview) names no card at all.

Trait Implementations

impl Clone for PolicySnapshot

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicySnapshot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicySnapshot

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PolicySnapshot

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PolicySnapshot

impl PartialEq for PolicySnapshot

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicySnapshot

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicySnapshot