Type Alias RestrictFn 

pub type RestrictFn = Box<dyn Fn() -> Result<(), String> + Send + Sync>;

Confinement callback: Ok(()) = the current thread is restricted; Err(reason) = confinement unavailable (loud-degrade, run unconfined).

Aliased Type

pub struct RestrictFn(/* private fields */);