Spectre.Reflection.Policy (Spectre v0.3.0)

Host-owned authorization policy for the Reflection operation.

Policies are compiled configuration. Runtime Skill data can request an inspection, but cannot supply or weaken this policy.

Summary

t()

Authorizes one exact actor and purpose. Empty allowlists deny all.

new(policy)

Builds a closed Reflection policy.

new!(attrs)

Builds a policy or raises with its stable validation reason.

@type t() :: %Spectre.Reflection.Policy{
  actor_refs: [String.t()],
  max_evidence: pos_integer(),
  purposes: [String.t()]
}

@spec authorize(t(), term(), term()) :: :ok | {:error, term()}

Authorizes one exact actor and purpose. Empty allowlists deny all.

@spec new(t() | map() | keyword()) :: {:ok, t()} | {:error, term()}

Builds a closed Reflection policy.

@spec new!(map() | keyword()) :: t()

Builds a policy or raises with its stable validation reason.