How the guard's operation classes appear inside kehto's runtime firewall.
The runtime keys its observations by the sender capability a message needs
(relay:write, resource:fetch), while the guard classifies by what the
message does (relay:publish, resource:bytes). null means the class has
no runtime counterpart: deletions share relay:write with other publishes,
control envelopes need no capability, and generic becomes the per-applet
global rate.
How the guard's operation classes appear inside kehto's runtime firewall.
The runtime keys its observations by the sender capability a message needs (
relay:write,resource:fetch), while the guard classifies by what the message does (relay:publish,resource:bytes).nullmeans the class has no runtime counterpart: deletions sharerelay:writewith other publishes,controlenvelopes need no capability, andgenericbecomes the per-applet global rate.