Struct ContentIsolationConfig 

pub struct ContentIsolationConfig {
    pub enabled: bool,
    pub max_content_size: usize,
    pub flag_injection_patterns: bool,
    pub spotlight_untrusted: bool,
    pub quarantine: QuarantineConfig,
    pub embedding_guard: EmbeddingGuardConfig,
    pub mcp_to_acp_boundary: bool,
    pub nli: NliConfig,
    pub secret_masking: SecretMaskingConfig,
}

Configuration for the content isolation pipeline, nested under [security.content_isolation] in the agent config file.

Fields

enabled: bool

When false, the sanitizer is a no-op: content passes through unchanged.

max_content_size: usize

Maximum byte length of untrusted content before truncation.

flag_injection_patterns: bool

When true, injection patterns detected in content are recorded as flags and a warning is prepended to the spotlighting wrapper.

spotlight_untrusted: bool

When true, untrusted content is wrapped in spotlighting XML delimiters that instruct the LLM to treat the enclosed text as data, not instructions.

quarantine: QuarantineConfig

Quarantine summarizer configuration.

embedding_guard: EmbeddingGuardConfig

Embedding anomaly guard configuration.

mcp_to_acp_boundary: bool

When true, MCP tool results flowing through ACP-serving sessions receive unconditional quarantine summarization and cross-boundary audit log entries. This prevents confused-deputy attacks where untrusted MCP output influences responses served to ACP clients (e.g. IDE integrations).

nli: NliConfig

NLI entailment check stage configuration.

secret_masking: SecretMaskingConfig

PAAC secret placeholder masking configuration.

Trait Implementations

impl Clone for ContentIsolationConfig

fn clone(&self) -> ContentIsolationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContentIsolationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ContentIsolationConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ContentIsolationConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ContentIsolationConfig

fn eq(&self, other: &ContentIsolationConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ContentIsolationConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContentIsolationConfig