pub enum DenialReason {
RiskExceedsConfig,
RiskExceedsCapability,
ConfidenceTooLow,
ActionTypeBlocked,
ActionUrgencyDeferred,
ActionCapabilityDenied,
TargetNotInContext,
BatchActionCapExceeded,
}Expand description
Structured rejection reason emitted by PolicyEngine.
Replaces the previous Option<String> channel so downstream consumers
(replay summary, golden tests, observability) can count denials per
reason without parsing free-form strings. BTreeMap keying requires
Ord; Hash keeps the door open for HashMap callers.
Variants§
RiskExceedsConfig
Intent risk exceeds the engine’s configured max_auto_risk.
RiskExceedsCapability
Intent risk exceeds the decision backend’s CapabilityLevel.max_risk.
ConfidenceTooLow
Intent confidence is below the engine’s floor.
ActionTypeBlocked
Action type matches the engine’s blocked-action substring list.
ActionUrgencyDeferred
Action urgency is Deferred — not in scope for this batch.
ActionCapabilityDenied
Action type is not in the backend CapabilityLevel.allowed_actions.
TargetNotInContext
Action targets a package or path that was not observed in the
StructuredContext that produced this batch.
BatchActionCapExceeded
Per-intent action count is above the engine’s max_actions_per_batch.
Trait Implementations§
Source§impl Clone for DenialReason
impl Clone for DenialReason
Source§fn clone(&self) -> DenialReason
fn clone(&self) -> DenialReason
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more