Build the complete guard configuration for a profile.
The firewall field is kehto's defaultConfig() tightened to the profile.
What each layer enforces:
The kehto engine (evaluate) enforces the content matchers, the per-applet
rates registered by applyNappletRules, the generic default rate
and the unfocused multiplier. Its init-burst guard only fires for callers
that supply initElapsedMs; kernl's focus firewall does not, so inside
@kernlize/guard the per-second burst is enforced by the ingress guard.
@kernlize/core installs burstGuard and unfocusedMultiplier in kehto's
runtime firewall, which supplies initElapsedMs and the window's focus.
The ingress guard enforces ingressBurst, ingressQueue,
quarantineThreshold, hiddenResourceAllowance and the envelope size caps.
Build the complete guard configuration for a profile.
The
firewallfield is kehto'sdefaultConfig()tightened to the profile. What each layer enforces:evaluate) enforces the content matchers, the per-applet rates registered by applyNappletRules, thegenericdefault rate and the unfocused multiplier. Its init-burst guard only fires for callers that supplyinitElapsedMs; kernl's focus firewall does not, so inside@kernlize/guardthe per-second burst is enforced by the ingress guard.@kernlize/coreinstallsburstGuardandunfocusedMultiplierin kehto's runtime firewall, which suppliesinitElapsedMsand the window's focus.ingressBurst,ingressQueue,quarantineThreshold,hiddenResourceAllowanceand the envelope size caps.deferQueue.