Module policy 

Structs

ActionTracker

Sliding-window action tracker for rate limiting.

PerSenderTracker

Per-sender sliding-window rate limiter.

SecurityPolicy

Security policy enforced on all tool executions.

Enums

AutonomyLevel

How much autonomy the agent has.

CommandRiskLevel

Risk score for shell command execution.

EscalationViolation

Specific kind of escalation violation returned by SecurityPolicy::ensure_no_escalation_beyond. Each variant names the field that violated subset semantics so the SubAgent spawn path can produce a precise error to the caller.

ToolOperation

Classifies whether a tool operation is read-only or side-effecting.