agentshield/ir/provenance_surface.rs
1use serde::{Deserialize, Serialize};
2
3/// Provenance metadata — who wrote this, where it came from.
4#[derive(Debug, Clone, Default, Serialize, Deserialize)]
5pub struct ProvenanceSurface {
6 /// Author information (from package.json, pyproject.toml, etc.)
7 pub author: Option<String>,
8 /// Repository URL.
9 pub repository: Option<String>,
10 /// License.
11 pub license: Option<String>,
12 /// Whether the package is signed.
13 pub signed: bool,
14 /// Checksum of the distribution (if from registry).
15 pub checksum: Option<String>,
16}