crates/brokerd/src/grants.rs reads grants/*.toml into a GrantSet: load reports every problem in every file and returns either a complete valid set or the full problem list, never a partial one; from_grants sorts by id and collects every rule-2..9 problem; render prints each problem then the runbook pointer. All 17 grants tests pass; make gate prints gate: ok. Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)
8 lines
199 B
TOML
8 lines
199 B
TOML
# The owner meant `mode`. If this file were skipped, fetch-example would allow what it forbids.
|
|
tool = "http_fetch"
|
|
mdoe = "deny"
|
|
max_taint = "secret"
|
|
|
|
[constraints]
|
|
hosts = ["internal.example.com"]
|