Module evaluator 

Structs

PipelineEvaluation

Full result of a pipeline run: value-level outcome plus accumulated taint side effects.

StepsEvaluation

Outcome of evaluate_effects: the phase’s decision plus taints emitted by any plugin steps that ran. Taints are accumulated even when the phase ultimately denies — audit needs to see what the plugins reported before the deny landed. Empty taints is the common case (most steps are predicates / PDP calls, not label emitters).

Enums

Decision

Outcome of evaluating a phase’s rule list.

FieldOutcome

Result of running a pipeline against one field’s value.

Functions

evaluate_effects

Walk an Effect list against the bag, dispatching PDP calls via pdp and plugin invocations via plugins. Returns the phase’s overall decision.

evaluate_pipeline

Walk a pipeline against value and the bag, applying stages left-to-right.

evaluate_rules

Evaluate a phase’s rules against the bag.