Module policy 

Structs

ActionTracker

Sliding-window action tracker for rate limiting.

PerSenderTracker

Per-sender sliding-window rate limiter. The bucket map is Arc-shared so cloned policies (SubAgents) consume from the same budgets.

SecurityPolicy

Enums

AutonomyLevel

The agent’s autonomy level, ordered from least to most autonomous.

CommandRiskLevel

Risk score for shell command execution.

EscalationViolation

Specific kind of escalation violation returned by SecurityPolicy::ensure_no_escalation_beyond. Each variant names the field that violated subset semantics so the SubAgent spawn path can produce a precise error to the caller.

ToolOperation

Classifies whether a tool operation is read-only or side-effecting.