Skip to content
OpenFirma
Search
Ctrl
K
Cancel
GitHub
RSS
Blog
Select theme
Dark
Light
Auto
Blog
Start Here
Overview
Quickstart
Concepts
Architecture & invariants
The enforcement pipeline
Action classes
Capabilities
Policies
Interception
Connectors
The sandbox boundary
Threat model & bypasses
User Guides
Initialize a project (firma config)
Run the sidecar standalone
Inspect live sidecars (firma sidecar status)
Start & monitor the daemon (firma sidecar & monitor)
Diagnose with firma doctor
Write your first Cedar policy
Test policies offline (firma policy)
Issue capability tokens
Wrap an agent with firma run
Enable HTTPS MITM
Govern Composio tool execution
Extend the action-class mapping
Inject credentials
Rehydrate & mask secrets (secret gateway)
Read & verify the audit log
Secure a local coding agent
Secure GitHub Copilot CLI
Secure Visual Studio Code
Deploy a GenAI web app
Rust API Reference
Rust API Reference
firma_audit_schema
firma_audit_schema
Crate root
firma_authority
firma-authority
Crate root
authorized_clients
cedar_loader
config
issuance
keygen
profiles
revocation
revocation
RevocationStore
seed
server
service
tls_verifier
firma_config_loader
firma_config_loader
Crate root
profile
resolver
resolver
ConfigResolver
FirmaConfigCandidate
FirmaConfigCandidateAncestors
schema
schema
FirmaConfig
firma_core
firma-core
Crate root
action_class
action_class
ActionClass
capability_seed
cedar
connector
credential
decision
envelope
envelope
ExecutionIntent
policy
run_audit
token
token
paseto
transport
firma_demo_fixture
firma-demo-fixture
Crate root
firma_fs
firma_fs
Crate root
FsError
firma_grpc_interceptor_proto
firma-grpc-interceptor-proto
Crate root
firma
firma
interceptor
interceptor
v1
v1
interceptor_hook_client
interceptor_hook_server
firma_http
firma_http
authority
header_map
header_name
header_value
method
str
firma_identifiers
firma_identifiers
agent_id
approval_token_id
audit_event_id
sandbox_id
session_id
token_id
firma_process_orchestrator
firma_process_orchestrator
Crate root
component
error
shutdown_event
start
start
RunningStack
startup_report
state_lease
status
stop
timeouts
topology
firma_run
firma-run
Crate root
authority
authority
bootstrap
config
prompt
selection
backend
backend
firecracker
linux_bwrap
macos_vz
platform
windows_wsl2
capability
capability
guard
issue
refresh
config
dns_stub
egress_guard
error
identity
log
log
ForegroundLog
ForegroundState
proxy_bridge
routing
runtime
seccomp
sidecar
sidecar
selection
firma_runtime_state
firma_runtime_state
Crate root
error
pidfile
process_id
runtime_paths
runtime_paths
RuntimeLayout
sidecar_markers
status
firma_secret_provider
firma_secret_provider
Crate root
broker
broker
client
client
BrokerClient
config
error
server
server
BrokerListener
config
stream
endpoint
endpoint
client
error
server
gateway
gateway
client
client
config
error
GatewayClient
glob
matcher
matcher
CompiledMatcher
error
non_empty
non_empty
str
str
NonEmptyStr
string
string
NonEmptyString
vec
vec
NonEmptyVec
placeholder
registry
spec
spec
cli
cli
CliIntegrationSpec
http
http
HttpIntegrationSpec
firma_sidecar
firma-sidecar
Crate root
audit
audit
builder
authority_client
authority_client
channel
policy_bundle
readiness
revocation
swappable_policy
authority_credentials
composio
composio
catalog
config
config
audit
authority
capability_seed
connector
enforcement
revocation
SidecarConfig
tenancy
connector
connector
provider
http
registry
credential
credential
provider
provider
basic
composite
vault
enforcement
enforcement
capability_map
capability_validation
cedar_evaluator
constraint_enforcement
decision
error
registry
revocation
session
session
persistent
state
handler
handler
RequestHandler
health
interceptor
interceptor
grpc
http
unix_socket
local_exec
local_exec
handler
handler
LocalExecHandler
token_store
normalizer
normalizer
mapping
pipeline
run_audit
secret_rewrite
secret_store
startup
startup
audit
authority
capability
connector
interceptor
local_exec
log_contract
pipeline
firma_stack
firma_stack
Crate root
config
error
plan
start
status
stop
firma_test_helpers
firma_test_helpers
Crate root
firma_tui
firma_tui
Crate root
control
control
announcement
app
bindings
command
editor
error
event
input
policies
render
rewrite
runner
state
state
audit
policy
runtime
status
toggle
GitHub
RSS
Blog
Select theme
Dark
Light
Auto
interceptor
Module: firma::interceptor
Section titled “Module: firma::interceptor”
Contents
Section titled “Contents”
Modules
v1
Module: v1
Section titled “Module: v1”
