Struct ConsentGateConfig 

pub struct ConsentGateConfig {
    pub enabled: bool,
    pub confirm_threshold: String,
    pub disclose_threshold: String,
    pub audit_all: bool,
}

Configuration for the write-time memory-consent gate, nested under [memory.consent_gate] in TOML (issue #6490).

Gates memory writes derived from untrusted content (tool output, web scrapes, MCP responses) behind either an interactive confirmation (memory_save tool path) or a visible in-turn disclosure note (autonomous background tool-output writes, which must never block on Channel::confirm per the non-blocking contract — see spec-039).

confirm_threshold/disclose_threshold accept the snake_case serialization of zeph_sanitizer::ContentTrustLevel ("trusted", "local_untrusted", "external_untrusted"). zeph-config cannot depend on zeph-sanitizer (the dependency runs the other way), so these are plain strings parsed by callers via ContentTrustLevel::from_str_opt.

Example (TOML)

[memory.consent_gate]
enabled = true
confirm_threshold = "external_untrusted"
disclose_threshold = "local_untrusted"
audit_all = true

Fields

enabled: bool

Master switch. Default: true.

confirm_threshold: String

Minimum trust tier (inclusive) that requires interactive confirmation via Channel::confirm on the memory_save tool path. Default: "external_untrusted".

disclose_threshold: String

Minimum trust tier (inclusive) that requires a visible in-turn disclosure note on autonomous background tool-output memory writes. Default: "local_untrusted".

audit_all: bool

When true, every memory write is recorded in the audit log with source attribution, regardless of trust tier. Default: true.

Trait Implementations

impl Clone for ConsentGateConfig

fn clone(&self) -> ConsentGateConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConsentGateConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ConsentGateConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ConsentGateConfig

where ConsentGateConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ConsentGateConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.