| 1 | //! TOML execpolicy rules consumed by the shell tool. |
| 2 | //! |
| 3 | //! The legacy Starlark policy engine (`PolicyParser`, `Policy`, `Rule`, the |
| 4 | //! `execpolicy check` CLI verb) was deleted for v0.9.4: the runtime never |
| 5 | //! enforced it, so a green `check` meant nothing. The live policy surface is |
| 6 | //! the TOML `execpolicy.toml` rules here plus the `codewhale-execpolicy` |
| 7 | //! crate's permission engine. |
| 8 | |
| 9 | pub mod matcher; |
| 10 | pub mod rules; |
| 11 | |
| 12 | pub use rules::{ExecPolicyDecision, load_default_policy}; |
| 13 |