Struct ResolvedMatch 

pub struct ResolvedMatch {
    pub matched: bool,
    pub is_deny: bool,
    pub is_conditional: bool,
    pub priority: u32,
    pub rule_override_deny: bool,
    pub context_deny: bool,
    pub require_approval: bool,
    pub condition_fired: bool,
    pub condition_verdict: VerdictKind,
    pub on_no_match_continue: bool,
    pub all_constraints_skipped: bool,
}

A pre-resolved policy match with all verdict-relevant information.

The unverified wrapper produces this struct from the action and a compiled policy. The verified core consumes it. No String, HashMap, glob, or serde operations are needed to compute the verdict from this struct.

Fields

• matched: Whether the policy’s tool/function pattern matched the action.
• is_deny: Whether the policy type is Deny.
• is_conditional: Whether the policy type is Conditional.
• priority: The policy’s priority (higher = evaluated first).
• rule_override_deny: Whether path/network/IP rules forced a Deny.
• context_deny: Whether context conditions produced a Deny.
• require_approval: Whether the policy requires human approval.
• condition_fired: For Conditional policies, whether any constraint matched.
• condition_verdict: The verdict from the fired constraint (if any).
• on_no_match_continue: For Conditional policies, whether to skip to next policy when no constraints fire (vs. implicit Allow).
• all_constraints_skipped: For Conditional policies, whether every constraint was skipped due to missing parameters.

Fields

matched: bool

Whether the policy’s tool/function pattern matched the action.

is_deny: bool

Whether the policy type is Deny.

is_conditional: bool

Whether the policy type is Conditional.

priority: u32

Policy priority (higher = evaluated first in sorted order).

rule_override_deny: bool

Whether path/network/IP rules forced a Deny on this policy.

context_deny: bool

Whether context conditions produced a Deny.

require_approval: bool

Whether the policy requires human approval (Conditional with require_approval).

condition_fired: bool

For Conditional policies: whether any constraint fired.

condition_verdict: VerdictKind

For Conditional policies: the verdict from the fired constraint.

on_no_match_continue: bool

For Conditional policies: skip to next policy when no constraint fires.

all_constraints_skipped: bool

For Conditional policies: all constraints were skipped (missing params).

Trait Implementations

impl Clone for ResolvedMatch

fn clone(&self) -> ResolvedMatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResolvedMatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ResolvedMatch

fn eq(&self, other: &ResolvedMatch) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ResolvedMatch

impl StructuralPartialEq for ResolvedMatch