Enum FailurePolicy 

pub enum FailurePolicy {
    FailHard,
    FailOpenWarn,
}

What controllers should do when an AccessLogger sink fails.

HIPAA-2a: read auditing is required by §164.312(b), but a failed audit cannot reflexively block every read or the system collapses when the sink blips. Two policies cover the spectrum:

• FailurePolicy::FailHard — the read is refused (HTTP 503). Required when Sensitivity::Phi or Sensitivity::Pci data would be exposed without an audit record.
• FailurePolicy::FailOpenWarn — the read is allowed; the failure is logged via tracing::warn!. Acceptable for dev / Public / Internal / Confidential reads.

FailurePolicy::for_sensitivity picks the right default per regime.

Variants

FailHard

FailOpenWarn

Implementations

impl FailurePolicy

pub fn for_sensitivity(s: Sensitivity) -> Self

Default per regime: PHI and PCI fail hard; everything else logs and continues.

Trait Implementations

impl Clone for FailurePolicy

fn clone(&self) -> FailurePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for FailurePolicy

impl Debug for FailurePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for FailurePolicy

impl PartialEq for FailurePolicy

fn eq(&self, other: &FailurePolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for FailurePolicy