Struct Label 

pub struct Label {
    pub provenance: BTreeSet<SourceId>,
    pub trust: Trust,
    pub sensitivity: Sensitivity,
    pub releases: BTreeSet<ReleaseMark>,
}

A value’s position in the information-flow lattice.

Fields

provenance: BTreeSet<SourceId>

trust: Trust

sensitivity: Sensitivity

releases: BTreeSet<ReleaseMark>

Destination-scoped release marks. A typed release no longer improves trust or sensitivity in place — it attaches a mark here, and the mark is honoured only at the exact sink the release named. Everywhere else — joins, memory writes, a plain label.trust read — the base label speaks: a release is for a destination, not for storage.

Implementations

impl Label

pub fn trusted() -> Self

The lattice bottom: trusted, public, no provenance.

pub fn untrusted(source: SourceId) -> Self

A value that crossed a trust boundary — every tool result, every retrieval, every peer response, including from first-party services. A compromised internal service is exactly what this exists for.

pub fn with_sensitivity(self, s: Sensitivity) -> Self

pub fn join(&self, other: &Self) -> Self

Bounded join-semilattice: trust degrades, sensitivity escalates, provenance accumulates, release marks union.

The union is a record, not a promotion: a mark only ever improves the label at the one sink it names, and callers that join labels across values with different pointer shapes (Tainted::zip, Tainted::object) rebase or drop the marks whose pointers the new shape invalidated.

pub fn is_untrusted(&self) -> bool

Trait Implementations

impl Clone for Label

fn clone(&self) -> Label

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Label

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Label

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Label

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Label

impl PartialEq for Label

fn eq(&self, other: &Label) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Label

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Label