Enum Sandbox 

pub enum Sandbox {
    Inherit,
    StoreScoped,
    Subprocess,
}

Kernel-sandbox declaration for a tool — the Landlock A→B seam.

v0 (declarative/audit-facing): the serve-level Landlock ruleset (WM_LANDLOCK=1) confines the whole process’s write-class filesystem rights to the store root; this field records nothing enforced per tool. v1 (enforced): tools declaring Sandbox::StoreScoped become eligible to run on a dedicated Landlock-restricted thread, upgrading the pathway without reworking tool definitions.

Variants

Inherit

Tool runs with the process’s ambient filesystem rights (default). The serve-level ruleset still applies process-wide when enabled.

StoreScoped

Tool only touches paths beneath the store root — eligible for the v1 per-tool restricted-thread pathway.

Subprocess

Tool launches external processes — its spawn sites must build commands through crate::Context::spawn so the OS runner (mandala-sandbox) can wrap them (B2). Declaring this is the tool’s assertion that it uses the policy; the dispatcher injects it and loud-degrades when no runner resolves.

Trait Implementations

impl Clone for Sandbox

fn clone(&self) -> Sandbox

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Sandbox

impl Debug for Sandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Sandbox

fn default() -> Sandbox

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Sandbox

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Sandbox

impl PartialEq for Sandbox

fn eq(&self, other: &Sandbox) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Sandbox

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Sandbox