Rulvar API reference / @rulvar/core / ToolExecutorRegulatedPosture
Interface: ToolExecutorRegulatedPosture
Defined in: packages/core/src/l0/spi/regulated-posture.ts:110
The posture an isolated tool executor chose at construction (RV4204). The executor is the one construction that dispatches HOST-SIDE effects, and the regulated floor requires its ledger: an effect no ledger records is an effect nobody can reconcile, the billingReceipts doctrine applied to tools.
Properties
| Property | Type | Description | Defined in |
|---|---|---|---|
allowEnv | readonly string[] | Host env names reaching the child, the exact allowlist. | packages/core/src/l0/spi/regulated-posture.ts:119 |
bounds | { maxOutputBytes: number; timeoutMs: number; } | The resolved per-call ceilings (defaults resolve at construction). | packages/core/src/l0/spi/regulated-posture.ts:121 |
bounds.maxOutputBytes | number | - | packages/core/src/l0/spi/regulated-posture.ts:121 |
bounds.timeoutMs | number | - | packages/core/src/l0/spi/regulated-posture.ts:121 |
isolation | | { flavor: "subprocess"; sandboxed: boolean; } | { flavor: "container"; network: string; readOnlyRoot: boolean; } | The isolation seam, per flavor: a subprocess names whether a sandbox launcher wraps the command; a container names its network mode and root-filesystem posture. | packages/core/src/l0/spi/regulated-posture.ts:127 |
kind | "tool-executor" | - | packages/core/src/l0/spi/regulated-posture.ts:113 |
ledger | boolean | Whether a ToolEffectLedger records every dispatch (intent first). | packages/core/src/l0/spi/regulated-posture.ts:117 |
name | string | The reference flavor ('subprocess', 'container') or a host name. | packages/core/src/l0/spi/regulated-posture.ts:115 |
regulatedPosture | 1 | Descriptor shape version; bumps when the meaning changes. | packages/core/src/l0/spi/regulated-posture.ts:112 |