security

type Check interface {
	// Name returns the unique identifier for this check.
	Name() string
	// Check evaluates the event and returns a result.
	Check(ctx context.Context, event *events.Event) (*CheckResult, error)
	// Enabled returns whether this check is currently active.
	Enabled() bool
}

type CheckResult struct {
	// Decision is the outcome of this check.
	Decision Decision
	// Reason is required for Block decisions, explaining why the action was blocked.
	Reason string
	// Guidance is optional advisory text for the agent.
	Guidance string
	// CheckName identifies which check produced this result.
	CheckName string
}

type Config struct {
	// FailOpen determines behavior when a check returns an error.
	// If true, check errors don't block (fail open).
	// If false, check errors cause blocking (fail closed).
	FailOpen bool
}

type Decision int

type Evaluator struct {
	// contains filtered or unexported fields
}

type Result struct {
	// FinalDecision is the overall decision after evaluating all checks.
	FinalDecision Decision
	// BlockReason is the reason if the action was blocked.
	BlockReason string
	// BlockedBy is the name of the check that blocked the action.
	BlockedBy string
	// Guidance contains aggregated guidance from all checks.
	Guidance []string
	// CheckResults contains the individual results from each check.
	CheckResults []*CheckResult
	// Error contains any error that occurred during evaluation.
	Error error
}