Trusted, bounded, non-blocking broker-side evaluators for the three dynamic permission terms not owned by identity, manifest, or grant state. More...
#include <control_admission.hpp>
Public Types | |
| using | Predicate |
Public Attributes | |
| Predicate | host_available |
| Predicate | activated |
| Predicate | policy_eligible |
Trusted, bounded, non-blocking broker-side evaluators for the three dynamic permission terms not owned by identity, manifest, or grant state.
They run inside the broker coordination boundary and must not re-enter ControlBroker. Defaults are fail-closed.
| Predicate pulp::inspect::ControlAdmissionPolicy::activated |
| Predicate pulp::inspect::ControlAdmissionPolicy::host_available |
| Predicate pulp::inspect::ControlAdmissionPolicy::policy_eligible |