Function close_if_stale

crates/openshell-supervisor-network/src/l7/relay.rs:990–1014

(guard: &PolicyGenerationGuard, ctx: &L7EvalContext)

}

fn close_if_stale(guard: &PolicyGenerationGuard, ctx: &L7EvalContext) -> bool {
    if !guard.is_stale() {
        return false;
    }

    ocsf_emit!(
        NetworkActivityBuilder::new(openshell_ocsf::ctx::ctx())
            .activity(ActivityId::Open)
            .action(ActionId::Denied)
            .disposition(DispositionId::Blocked)
            .severity(SeverityId::Medium)
            .status(StatusId::Failure)
            .dst_endpoint(Endpoint::from_domain(&ctx.host, ctx.port))
            .firewall_rule(&ctx.policy_name, "l7")
            .message(format!(
                "L7 tunnel closed after policy reload [host:{} port:{} captured_generation:{} current_generation:{}]",
                ctx.host,
                ctx.port,
                guard.captured_generation(),
                guard.current_generation(),
            ))
            .build()
    );
    true
}

async fn relay_jsonrpc<C, U>(
    config: &L7EndpointConfig,