gleamunison/sandbox_policy

Types

BoundaryRefusal

pub type BoundaryRefusal {
  MissingExternalExecutor
  DirectHostFfiDenied
  InvalidResourceBudget
}

Constructors

```
MissingExternalExecutor
```
```
DirectHostFfiDenied
```
```
InvalidResourceBudget
```

ExecutionProfile

</>

pub type ExecutionProfile {
  Local
  AuthenticatedRemote
  UntrustedExecution
}

Constructors

```
Local
```
```
AuthenticatedRemote
```
```
UntrustedExecution
```

ExternalExecutor

</>

pub type ExternalExecutor {
  ExternalExecutor(
    name: String,
    launcher: fn(String, ResourceBudget) -> Result(String, String),
  )
}

Constructors

ExternalExecutor(
  name: String,
  launcher: fn(String, ResourceBudget) -> Result(String, String),
)

ResourceBudget

</>

pub type ResourceBudget {
  ResourceBudget(
    deadline_ms: Int,
    max_processes: Int,
    max_memory_bytes: Int,
    max_reductions: Int,
    max_concurrency: Int,
  )
}

Constructors

ResourceBudget(
  deadline_ms: Int,
  max_processes: Int,
  max_memory_bytes: Int,
  max_reductions: Int,
  max_concurrency: Int,
)

SandboxPolicy

</>

pub type SandboxPolicy {
  SandboxPolicy(
    profile: ExecutionProfile,
    budget: ResourceBudget,
    abilities: capability.Policy,
    direct_host_ffi: Bool,
    external_executor: option.Option(ExternalExecutor),
  )
}

Constructors

SandboxPolicy(
  profile: ExecutionProfile,
  budget: ResourceBudget,
  abilities: capability.Policy,
  direct_host_ffi: Bool,
  external_executor: option.Option(ExternalExecutor),
)

Values

admit

</>

pub fn admit(
  policy: SandboxPolicy,
) -> Result(SandboxPolicy, BoundaryRefusal)

admit_profile

</>

pub fn admit_profile(profile: String) -> Result(Nil, String)

Transport-facing admission. An Erlang route knows the deployment profile name from the environment, not a Gleam record, so this builds the policy for that name and admits it. Ok means the profile may serve untrusted work; Error carries the refusal name.

This is the enforcement point the README claims: the untrusted-execution profile refuses until a real external executor exists, and it refuses direct host FFI by construction.

default_budget

</>

pub fn default_budget() -> ResourceBudget

denies_untrusted_execution

</>

pub fn denies_untrusted_execution(profile: String) -> Bool

execute

</>

pub fn execute(
  policy: SandboxPolicy,
  input: String,
) -> Result(String, String)

local

</>

pub fn local(abilities: capability.Policy) -> SandboxPolicy

refusal_name

</>

pub fn refusal_name(refusal: BoundaryRefusal) -> String

untrusted

</>

pub fn untrusted(
  abilities: capability.Policy,
  external_executor: option.Option(ExternalExecutor),
) -> SandboxPolicy