Enum ReasonCode 

#[non_exhaustive]
pub enum ReasonCode {
    Unconditional,
    AllChecksPassed,
    CapabilityPresent,
    CapabilityMissing,
    IssuerMatch,
    IssuerMismatch,
    Revoked,
    Expired,
    InsufficientTtl,
    IssuedTooLongAgo,
    RoleMismatch,
    ScopeMismatch,
    ChainTooDeep,
    DelegationMismatch,
    AttrMismatch,
    MissingField,
    RecursionExceeded,
    ShortCircuit,
    CombinatorResult,
    WorkloadMismatch,
    WitnessQuorumNotMet,
    SignerTypeMatch,
    SignerTypeMismatch,
    ApprovalRequired,
    ApprovalGranted,
    ApprovalExpired,
    ApprovalAlreadyUsed,
    ApprovalRequestMismatch,
    AssuranceMet,
    AssuranceInsufficient,
}

Machine-readable reason code for stable logging and alerting.

These codes are designed to be stable across versions for use in monitoring dashboards, alerting rules, and audit queries.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Unconditional

Unconditional allow/deny (True/False expressions).

AllChecksPassed

All checks in a policy passed.

CapabilityPresent

Required capability is present.

CapabilityMissing

Required capability is missing.

IssuerMatch

Issuer matches expected value.

IssuerMismatch

Issuer does not match expected value.

Revoked

Attestation has been revoked.

Expired

Attestation has expired.

InsufficientTtl

Remaining TTL is below required threshold.

IssuedTooLongAgo

Attestation was issued too long ago.

RoleMismatch

Role does not match expected value.

ScopeMismatch

Scope (repo, ref, path, env) does not match.

ChainTooDeep

Delegation chain exceeds maximum depth.

DelegationMismatch

Delegator does not match expected value.

AttrMismatch

Custom attribute does not match expected value.

MissingField

Required field is missing from context.

RecursionExceeded

Expression recursion limit exceeded.

ShortCircuit

Short-circuit evaluation in And/Or.

CombinatorResult

Result from And/Or/Not combinator.

WorkloadMismatch

Workload claim does not match expected value.

WitnessQuorumNotMet

Witness quorum was not met.

SignerTypeMatch

Signer type matches expected value.

SignerTypeMismatch

Signer type does not match expected value.

ApprovalRequired

Policy ApprovalGate determined human approval is needed.

ApprovalGranted

Approval attestation was valid and matched.

ApprovalExpired

Approval request TTL expired.

ApprovalAlreadyUsed

Approval JTI already used (replay attempt).

ApprovalRequestMismatch

Approval scope hash doesn’t match the current request.

AssuranceMet

Assurance level meets or exceeds the minimum requirement.

AssuranceInsufficient

Assurance level is below the minimum requirement.

Trait Implementations

impl Clone for ReasonCode

fn clone(&self) -> ReasonCode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ReasonCode

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ReasonCode

fn deserialize<__D>( __deserializer: __D, ) -> Result<ReasonCode, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for ReasonCode

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hash for ReasonCode

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ReasonCode

fn eq(&self, other: &ReasonCode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ReasonCode

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for ReasonCode

impl StructuralPartialEq for ReasonCode