Enum ResolvedScope 

pub enum ResolvedScope {
    Bounded {
        concrete: BTreeSet<String>,
        classes: BTreeSet<String>,
    },
    Unbounded,
    Unknown,
}

What a native fence actually permits on ONE axis, expressed portably (the projection agent-bridle produces from its native profile). The lattice the L3 BOUND law is computed over — fidelity is never asserted.

Variants

Bounded

Bounded authority: the union of concrete items the mechanism permits (e.g. canonicalized paths / hosts) and named capability classes it permits but cannot enumerate as a concrete set (e.g. a whole loopback interface). The two are independent dimensions, so a fence can permit both. The empty scope ({}, {}) is the bottom / identity element for union: ∅ ∪ X = X.

Fields

concrete: BTreeSet<String>

classes: BTreeSet<String>

Unbounded

The mechanism imposes no restriction on this axis (⊤, the top element).

Unknown

The mechanism’s authority on this axis could not be resolved. Any comparison involving Unknown is Unknown → fail-closed (L7).

Implementations

impl ResolvedScope

pub fn empty() -> Self

The bottom element: permits nothing. The identity for union.

pub fn concrete<I: IntoIterator<Item = String>>(items: I) -> Self

A bounded scope of concrete items only.

pub fn class(name: impl Into<String>) -> Self

A bounded scope of a single named capability class only.

pub fn from_scope(scope: &Scope<String>) -> Self

Lift a delegated Scope<String> into the resolved lattice: All ⇒ Unbounded, Only(set) ⇒ Bounded{concrete: set}.

pub fn union(&self, other: &Self) -> Self

The union self ∪ other — the bounding authority when combining the delegated grant with the authorized closure. Unknown propagates (fail-closed); Unbounded absorbs; two bounded scopes union their concrete and class dimensions independently. The empty scope is the identity, so ∅ ∪ X = X for every X (the composability law).

Trait Implementations

impl Clone for ResolvedScope

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResolvedScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ResolvedScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ResolvedScope

impl PartialEq for ResolvedScope

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ResolvedScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ResolvedScope