The matched rule's exceed-action.
Primary disposition for the caller.
OptionalmessageThe triggering message, if available.
The napplet dTag (version-agnostic identity key).
Operation class string (e.g. 'relay:write', 'outbox:publish', 'intent:invoke').
Human-readable reason string for logging and audit.
Identifier of the rule that made the decision (e.g. 'rate:default', 'burst', 'policy:deny').
The napplet window that sent the message.
Event emitted on every firewall evaluation that results in an audit-level decision (flag, block, or prompt).
Param: windowId
The napplet window that sent the message.
Param: napplet
The napplet dTag (version-agnostic identity key).
Param: opClass
Operation class string (e.g. 'relay:write', 'outbox:publish').
Param: decision
Primary disposition: 'pass', 'reject', or 'prompt'.
Param: action
The matched rule's exceed-action: 'flag', 'block', or 'ignore'.
Param: ruleId
Identifier of the rule that made the decision.
Param: reason
Human-readable reason string for logging/audit.
Param: message
The triggering NappletMessage, if available.