Struct AiGovernance 

pub struct AiGovernance {
    pub team_allowlists: BTreeMap<String, Vec<String>>,
    pub audit: bool,
    pub dry_run: bool,
}

Model governance (DW-084 ai.governance): per-team model allowlists plus a shadow-audit switch. A team is a POLICY name (the same vocabulary the token budgets use for scope: policy): every consumer attaching a policy with an allowlist entry is restricted to that allowlist’s aliases. The check runs BEFORE routing, against the client-facing alias (the model value in the request body), so a typo or a renamed alias is blocked at the edge rather than surfacing as a provider 404. Multiple policies with allowlists that bind one request intersect (deny-wins): the model must be in EVERY binding allowlist, matching the authz deny-anywhere-wins principle. Consumers with no binding allowlist policy are unrestricted (fail-open, the DW-017 default posture). audit: true records BOTH allowed and denied attempts into the ai_governance_events analytics table for shadow review.

Fields

team_allowlists: BTreeMap<String, Vec<String>>

Per-policy (team) model allowlists. The key is the POLICY name (the team), the value is the list of allowed client-facing model aliases. A consumer attaching a policy listed here may only call the aliases in its allowlist; a consumer attaching no listed policy is unrestricted. Validation rejects an allowlist entry that names an alias absent from ai.models (an authoring error, not a runtime 404).

audit: bool

When true, record model usage for shadow audit: BOTH allowed calls and denied attempts land in the ai_governance_events analytics table (the admin /analytics/governance-audit endpoint reads it). When false (the default), only the denial metric fires — no per-event audit rows are written.

dry_run: bool

SEC-14 / CFG-14: dry-run mode. When true, the governance engine evaluates the team allowlist and records would-be denials (dwara_policy_dry_run_total{phase="ai_governance"} + a structured log) but does NOT reject the request — the call proceeds to the model. Useful for rolling out a new allowlist without breaking existing callers. Default false (reject on mismatch).

Trait Implementations

impl Clone for AiGovernance

fn clone(&self) -> AiGovernance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AiGovernance

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AiGovernance

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for AiGovernance

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for AiGovernance

fn eq(&self, other: &AiGovernance) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AiGovernance

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AiGovernance