PolicyEnforcer

State Variables

Path scratch capacity in steps (be16 per step).

uint8 internal constant MAX_PATH_DEPTH = 32

Maximum array length for quantifier iteration (gas DoS protection).

uint256 internal constant MAX_QUANTIFIED_ARRAY_LENGTH = 256

Reverts when callData violates policy.

function enforce(bytes memory policy, bytes calldata callData) internal view;

Parameters

Name	Type	Description
`policy`	`bytes`	The policy blob with embedded descriptor.
`callData`	`bytes`	The calldata to validate.

Returns true if callData complies with policy.

Reverts for malformed policies; returns false for violations.

function check(bytes memory policy, bytes calldata callData) internal view returns (bool ok);

Parameters

Name	Type	Description
`policy`	`bytes`	The policy blob with embedded descriptor.
`callData`	`bytes`	The calldata to validate.

Returns

Name	Type	Description
`ok`	`bool`	True if calldata complies with the policy.

Thrown when policy validation fails.

error PolicyViolation(uint32 groupIndex, uint32 ruleIndex);

Thrown when the function selector does not match the policy header.

error SelectorMismatch(bytes4 expected, bytes4 actual);

Thrown when an unknown operator code is encountered.

error UnknownOperator(uint8 opCode);

Thrown when an unknown context property ID is requested.

error UnknownContextProperty(uint16 contextId);

Thrown when calldata is too short to contain a selector.

error MissingSelector();

Thrown when nested quantifiers are used (unsupported).

error NestedQuantifiersUnsupported();

Thrown when array exceeds max length for quantified iteration.

error ArrayTooLargeForQuantifier(uint256 length, uint256 maxLength);