Module ingress 

Universal ingress policy contract types (RFC phase 1).

Structs

IngressContext

The envelope stamped by the entry layer; travels with the turn into the engine. See the module docs.

UntrustedFraming

Untrusted-data framing instructions for an IngressDecision::Annotate disposition. Minimal placeholder for phase 1; the framing fields are fleshed out when Annotate becomes reachable (phase 3).

Enums

IngressDecision

InternalPrincipal

The runtime-owned principal that initiated an internally driven turn — who caused the turn to exist, distinct from the executing agent identity the turn runs under. Stamped once at dispatch from the runtime’s own resolved state (job config, canonical agent alias, runtime task id), never from message content or tool arguments, and immutable for the turn’s lifetime. Persisted records carry it verbatim as at-time-of-action fact. Internal principals never appear in peer_groups and are never consulted by peer-membership checks — identity and delivery permission are separate axes.

SourceClass

Whether an inbound turn originates outside the agent (a transport peer) or from an internal driver (cron, an SOP step, a subagent).

Transport

The transport an inbound turn arrived on. Real per-transport stamping is phase 2; phase 1 stamps Transport::Internal everywhere.

TrustClass

Trust class resolved for the turn’s sender. Minimal for phase 1; peer-group resolution (the real source) is phase 2.

TurnOrigin