Module runtime_control 

Boot-effective governance posture and live enforcement state.

This module owns the network/authentication trust-boundary proof used to decide whether an operator may disable tool governance. It deliberately keeps mutation authority separate from the read-only gate and status handles consumed by runtime and API code.

Structs

GovernanceAdmissionToken

Admission capability for one registered ingress.

GovernanceFinalization

Result of finalizing a durable preference.

GovernanceGateHandle

Read-only hot-path gate handle.

GovernanceMutationHandle

Trusted-host mutation handle. Do not expose this to agent kernels.

GovernancePreferencePlan

Durable action required before the runtime may finalize governance.

GovernanceRuntimeSnapshot

Coherent status consumed by the tool gate and settings surface.

GovernanceStatusHandle

Read-only API/status handle.

IngressRegistrationProof

Opaque proof returned only after a declared ingress records its bound address.

Enums

GovernanceEffectiveState

Operator-facing effective state derived from one coherent snapshot.

GovernancePreferenceWrite

GovernanceRuntimeError

GovernanceRuntimePhase

Boot/runtime phase of the governance authority.

GovernanceStatusReason

Closed reason-code vocabulary for mandatory or unavailable states.

Functions

governance_runtime_handles

Construct separate authority handles for one process boot.