enforcement

Module: sidecar::enforcement

Contents

Structs

• CapabilityValidationConfig - Capability validation configuration.
• ConstraintEnforcementConfig - Constraint enforcement configuration.
• EnforcementConfig - Enforcement engine configuration.
• MappingConfig - Mapping rules configuration.

Enums

• SessionStateBackend - Session-state storage backend selector.

---

firma_config_schema::sidecar::enforcement::CapabilityValidationConfig

Struct

Capability validation configuration.

Fields:

• clock_skew_tolerance: std::time::Duration - Clock skew tolerance for expiry checks. Default: zero (strict).

Trait Implementations:

• Default
  • fn default() -> CapabilityValidationConfig
• Clone
  • fn clone(self: &Self) -> CapabilityValidationConfig
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::enforcement::ConstraintEnforcementConfig

Struct

Constraint enforcement configuration.

Fields:

• session_state_capacity: usize - Maximum number of active sessions tracked in the session-state cache.
• session_state_backend: SessionStateBackend - Session-state storage backend.
• session_state_path: Option<std::path::PathBuf> - Optional path for the persistent session-state JSONL file. Only used

Trait Implementations:

• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Clone
  • fn clone(self: &Self) -> ConstraintEnforcementConfig

firma_config_schema::sidecar::enforcement::EnforcementConfig

Struct

Enforcement engine configuration.

Groups the three enforcement sub-systems: intent-mapping rules, capability validation (Stage 1), and constraint enforcement (Stage 2).

Fields:

• mapping: MappingConfig - Intent normalization / mapping rules.
• capability_validation: CapabilityValidationConfig - Capability validation settings.
• constraint_enforcement: ConstraintEnforcementConfig - Constraint enforcement settings.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> EnforcementConfig
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Default
  • fn default() -> EnforcementConfig

firma_config_schema::sidecar::enforcement::MappingConfig

Struct

Mapping rules configuration.

Fields:

• rules_path: std::path::PathBuf - Path to the primary mapping rules TOML file.
• rules_paths: Vec<std::path::PathBuf> - Additional mapping rule files merged on top of rules_path.
• default_protected: bool - Whether unlisted hosts are protected by default.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> MappingConfig
• Default
  • fn default() -> Self
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>

firma_config_schema::sidecar::enforcement::SessionStateBackend

Enum

Session-state storage backend selector.

Variants:

• Lru - In-memory LRU cache (default). State lost on eviction / restart.
• Persistent - File-backed JSONL store; state survives eviction and restart.

Traits: Copy, Eq

Trait Implementations:

• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• PartialEq
  • fn eq(self: &Self, other: &SessionStateBackend) -> bool
• Default
  • fn default() -> SessionStateBackend
• Clone
  • fn clone(self: &Self) -> SessionStateBackend
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result