Struct Label 

pub struct Label {
    pub provenance: BTreeSet<SourceId>,
    pub trust: Trust,
    pub sensitivity: Sensitivity,
}

A value’s position in the information-flow lattice.

A pure product of three joins — provenance unions, trust degrades, sensitivity escalates. Release marks are deliberately not part of a label: a mark is scoped to the one value a release was granted over, while a label flows through every join a derived value is built from, so a mark stored here would ride any bare join onto data it never covered unless every call site remembered to strip it. Marks live on Tainted instead, where the operations that can prove value lineage — projection, assembly, transformation — are the only ways to move one.

Fields

provenance: BTreeSet<SourceId>

trust: Trust

sensitivity: Sensitivity

Implementations

impl Label

pub fn trusted() -> Self

The lattice bottom: trusted, public, no provenance.

pub fn untrusted(source: SourceId) -> Self

A value that crossed a trust boundary — every tool result, every retrieval, every peer response, including from first-party services. A compromised internal service is exactly what this exists for.

pub fn with_sensitivity(self, s: Sensitivity) -> Self

pub fn join(&self, other: &Self) -> Self

Bounded join-semilattice: trust degrades, sensitivity escalates, provenance accumulates.

Nothing else rides a join. In particular a join can never transport a release: marks live on Tainted, not here, so combining labels — however a caller does it — cannot extend a grant to data the release never covered.

pub fn is_untrusted(&self) -> bool

Trait Implementations

impl Clone for Label

fn clone(&self) -> Label

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Label

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Label

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Label

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Label

impl PartialEq for Label

fn eq(&self, other: &Label) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Label

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Label