Struct PolicyEnforcer 

pub struct PolicyEnforcer { /* private fields */ }

Deterministic policy evaluator. Constructed once from config, immutable thereafter.

Implementations

impl PolicyEnforcer

pub fn compile(config: &PolicyConfig) -> Result<Self, PolicyCompileError>

Compile a PolicyConfig into a PolicyEnforcer.

Errors

Returns PolicyCompileError if any glob or regex in the config is invalid, or if the policy file cannot be loaded or parsed.

pub fn rule_count(&self) -> usize

Return the total number of compiled rules (inline + file-loaded).

pub fn evaluate( &self, tool_name: &str, params: &Map<String, Value>, context: &PolicyContext, ) -> PolicyDecision

Evaluate a tool call against the compiled policy rules.

Returns PolicyDecision::Deny when any deny rule matches. Returns PolicyDecision::Allow when any allow/allow_if rule matches. Falls back to default_effect when no rule matches.

Tool name is normalized (lowercase, trimmed) before matching.

Trait Implementations

impl Debug for PolicyEnforcer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.