Documentation
¶
Overview ¶
Package gatepolicy evaluates assignment policy without reading or writing a store. Callers must obtain authority from a gateauthority.Snapshot; a failed read belongs on the fault path, not in a policy input.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Input ¶
type Input struct {
Event model.ContractEventKind
Action gateauthority.ActionClass
Semantic runtime.EventSemantic
StopLoop runtime.StopLoopPolicy
Capability runtime.ResponseCapability
Claim gateauthority.SessionClaim
Authority gateauthority.ActorAuthority
}
Input contains policy facts, not host payload bytes. Event identifies the occurrence; the caller supplies its classified action and runtime properties. Decide does not reclassify or mutate those facts.
type Refusal ¶
type Refusal struct {
// contains filtered or unexported fields
}
Refusal is an immutable fault value. Its zero value is invalid.
func NewRefusal ¶
func NewRefusal(kind RefusalKind) (Refusal, error)
func (Refusal) Kind ¶
func (r Refusal) Kind() RefusalKind
type RefusalKind ¶
type RefusalKind uint8
RefusalKind identifies a failure to evaluate, never a policy denial.
const ( RefusalUnset RefusalKind = iota RefusalPhaseUnknown RefusalPolicyUnlisted )
func (RefusalKind) IsValid ¶
func (k RefusalKind) IsValid() bool
type Result ¶
type Result struct {
// contains filtered or unexported fields
}
Result holds exactly one valid decision or refusal, or neither when invalid. Constructors reject invalid operands by returning the unusable zero value.
Source Files