Type Alias ProcessPolicyDecision

ProcessPolicyDecision:
    | { allowed: true }
    | {
        allowed: false;
        reason:
            | "process capture is disabled"
            | "host network access is not approved by operator policy"
            | "executable is outside approved roots"
            | "working directory is outside approved roots"
            | "scenario requests an environment variable not allowed by policy"
            | "filesystem root is outside approved roots";
    }