com.blockether.vis.internal.sandbox.scoped-policy — com.blockether/vis 0.2.40

Scoped access settings. Local policy can narrow, never expand, the host ceiling.

assert-bounded! clj

(assert-bounded! host candidate root)

Reject expanded grants after canonical path resolution, including symlink aliases.

effective-config clj

(effective-config db target)

Resolve access keys independently; unrelated configuration is not session-owned.

fields clj

set-setting! clj

(set-setting! db target id action given)

setting? clj

(setting? id)

settings clj

(settings db target)

snapshot clj

(snapshot db session-id)

Use the current host ceiling if a later ancestor edit invalidates a local grant.

validate-candidate! clj

(validate-candidate! target candidate)

Validate a complete staged access configuration before any owner is written.