Struct AdversarialPolicyGateExecutor 

pub struct AdversarialPolicyGateExecutor<T: ToolExecutor> { /* private fields */ }

Wraps an inner ToolExecutor, running an LLM-based adversarial policy check before delegating structured tool calls.

Only execute_tool_call and execute_tool_call_confirmed are intercepted. Legacy execute / execute_confirmed bypass the check (no structured tool_id).

Implementations

impl<T: ToolExecutor> AdversarialPolicyGateExecutor<T>

pub fn new( inner: T, validator: Arc<PolicyValidator>, llm: Arc<dyn PolicyLlmClient>, ) -> Self

Create a new AdversarialPolicyGateExecutor.

pub fn with_audit(self, audit: Arc<AuditLogger>) -> Self

Attach an audit logger.

Trait Implementations

impl<T: ToolExecutor + Debug> Debug for AdversarialPolicyGateExecutor<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T: ToolExecutor> ToolExecutor for AdversarialPolicyGateExecutor<T>

async fn execute(&self, response: &str) -> Result<Option<ToolOutput>, ToolError>

Parse response for fenced tool blocks and execute them.

async fn execute_confirmed( &self, response: &str, ) -> Result<Option<ToolOutput>, ToolError>

Execute bypassing confirmation checks (called after user approves).

fn tool_definitions(&self) -> Vec<ToolDef>

Return the tool definitions this executor can handle.

async fn execute_tool_call( &self, call: &ToolCall, ) -> Result<Option<ToolOutput>, ToolError>

Execute a structured tool call. Returns Ok(None) if call.tool_id is not handled.

async fn execute_tool_call_confirmed( &self, call: &ToolCall, ) -> Result<Option<ToolOutput>, ToolError>

Execute a structured tool call bypassing confirmation checks.

fn set_skill_env(&self, env: Option<HashMap<String, String>>)

Inject environment variables for the currently active skill. No-op by default.

fn set_effective_trust(&self, level: SkillTrustLevel)

Set the effective trust level for the currently active skill. No-op by default.

fn is_tool_retryable(&self, tool_id: &str) -> bool

Whether the executor can safely retry this tool call on a transient error.