symfonic.agent.cutover.injections

injections

What an agent may be built with, as data (TA8.20).

:mod:symfonic.agent.cutover.policy owns the two questions "which configuration may a migrated turn carry" and "which arguments may its caller pass". This module owns the third: which handler sets the constructor may inject. It is a separate file because it is a separate question with a separate guard — :func:~symfonic.agent.cutover.envelope.admit_invocation reads the per-call mapping by iterating the run/stream signature, and no injection appears in that signature — and because policy had reached its line budget, which is the budget's job.

The rule is the one every allowlist in this package shares: default-DENY. An injection with no entry here refuses by name, so a future constructor-injected handler set is refused until somebody states its consumer, rather than admitted because nobody remembered it existed.