bios_access/
bios_access.rs

1//! BIOS-level access control governance.
2//!
3//! Demonstrates the "governance chip" concept: a tiny,
4//! deterministic core that governs device capability access with no
5//! inference, no heap allocation in the hot path, and full auditability.
6//!
7//! This is the embedded / BIOS deployment target. The same logic engine
8//! that runs in a healthcare ERP can govern a microcontroller.
9
10use urge_runtime::embedded::BiosGovernor;
11
12fn main() {
13    println!("=== URGE BIOS Access Control Governance Demo ===\n");
14
15    let gov = BiosGovernor::new();
16
17    struct Request {
18        capability: &'static str,
19        app: &'static str,
20        battery: u8,
21        expected: bool,
22    }
23
24    let requests = &[
25        Request {
26            capability: "camera",
27            app: "app.photos",
28            battery: 80,
29            expected: true,
30        },
31        Request {
32            capability: "camera",
33            app: "app.photos",
34            battery: 3,
35            expected: false,
36        }, // critical battery
37        Request {
38            capability: "gps",
39            app: "app.maps",
40            battery: 25,
41            expected: true,
42        },
43        Request {
44            capability: "gps",
45            app: "app.maps",
46            battery: 2,
47            expected: false,
48        }, // critical battery
49        Request {
50            capability: "microphone",
51            app: "app.voice",
52            battery: 50,
53            expected: true,
54        },
55        Request {
56            capability: "nfc",
57            app: "app.pay",
58            battery: 15,
59            expected: false,
60        }, // below 20% threshold
61        Request {
62            capability: "wifi",
63            app: "app.browser",
64            battery: 90,
65            expected: true,
66        },
67    ];
68
69    println!(
70        "{:<15} {:<15} {:<10} {:<10} {:<8}",
71        "Capability", "App", "Battery%", "Permitted", "Correct?"
72    );
73    println!("{}", "-".repeat(63));
74
75    for req in requests {
76        let permitted = gov.check_access(req.capability, req.app, req.battery);
77        let correct = permitted == req.expected;
78        println!(
79            "{:<15} {:<15} {:<10} {:<10} {:<8}",
80            req.capability,
81            req.app,
82            format!("{}%", req.battery),
83            if permitted { "YES ✓" } else { "NO  ✗" },
84            if correct { "✓" } else { "FAIL" },
85        );
86    }
87
88    println!("\n=== Key properties demonstrated ===");
89    println!("  • Deterministic: same inputs → same output, always");
90    println!("  • Auditability: every decision has a logic trace");
91    println!("  • No inference: pure formal logic, no learned weights");
92    println!("  • Embedded-capable: no heap allocation in access-control path");
93    println!("  • <1µs decision time on ARM Cortex-M4 (est.)");
94    println!("\nThis is the 'BIOS governance chip' concept:");
95    println!("  The same engine governs a medical device AND a healthcare ERP.");
96    println!("  Same paradigms. Same Unicode dictionary. Same audit trail format.");
97    println!("  Different policies. Universal governance layer.");
98}
bios_access/bios_access.rs

bios_access/
bios_access.rs
