Struct TargetPolicyManifest 

pub struct TargetPolicyManifest {
    pub allow_mutating_sessions: bool,
    pub audit_capacity: u64,
    pub max_snapshot_items: u32,
    pub resources: Vec<ResourcePolicyManifest>,
    pub schema_version: u32,
}

Target-wide ceiling policy manifest.

Fields are declared in alphabetical order to produce deterministic canonical JSON.

Fields

allow_mutating_sessions: bool

Whether mutating sessions may be opened.

audit_capacity: u64

Bounded audit capacity.

max_snapshot_items: u32

Maximum snapshot items per bounded read snapshot.

resources: Vec<ResourcePolicyManifest>

Per-resource ceiling policies, sorted by resource ID.

schema_version: u32

Schema version (must be 1).

Implementations

impl TargetPolicyManifest

pub fn engineering_default( resources: &BTreeMap<ResourceId, MmioResource>, ) -> Self

Default engineering ceiling policy for Phase 1 exploration.

pub fn from_bundle_ceiling( resources: &BTreeMap<ResourceId, MmioResource>, ceiling: &BTreeMap<ResourceId, ResourceCeiling>, allow_mutating_sessions: bool, ) -> Self

Constructs a canonical target policy manifest from offered resources and their configured per-resource ceiling entries (including hard_denied ranges and writable_registers).

pub fn canonicalize(&mut self) -> Result<(), PolicyValidationError>

Validates and canonicalizes the manifest.

pub fn to_canonical_json(&self) -> Result<String, Error>

Serializes to canonical JSON.

pub fn policy_digest(&self) -> Sha256Digest

Computes the canonical SHA-256 digest of the manifest.

pub fn to_ceiling_map(&self) -> BTreeMap<ResourceId, ResourceCeiling>

Converts resource manifests to a ceiling map for the policy engine.

pub fn narrow_with(&self, runtime: &Self) -> Result<Self, NarrowingError>

Validates that runtime narrows or preserves (does not widen) this baseline manifest. Returns the validated narrowed manifest.

Trait Implementations

impl Clone for TargetPolicyManifest

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TargetPolicyManifest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TargetPolicyManifest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TargetPolicyManifest

impl PartialEq for TargetPolicyManifest

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TargetPolicyManifest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TargetPolicyManifest