Module policy 

Re-exports

pub use crate::autonomy::AutonomyLevel;

Structs

ActionTracker

Sliding-window action tracker for rate limiting.

PerSenderTracker

Per-sender sliding-window rate limiter. The bucket map is Arc-shared so cloned policies (SubAgents) consume from the same budgets.

SecurityPolicy

Enums

CommandRiskLevel

Risk score for shell command execution.

EscalationViolation

Specific kind of escalation violation returned by SecurityPolicy::ensure_no_escalation_beyond. Each variant names the field that violated subset semantics so the SubAgent spawn path can produce a precise error to the caller.

ToolOperation

Classifies whether a tool operation is read-only or side-effecting.