Enum EvidenceClaim 

#[non_exhaustive]
pub enum EvidenceClaim {
    TerminalOutcome,
    CapturedStreams,
    ResourceUsage,
    AllowedActions,
    DeniedAttempts,
    FilesystemDelta,
    ProcessTree,
    NetworkActivity,
    ArtifactLineage,
    MechanismAttestation,
}

One kind of evidence a backend can produce for a requirement.

The members of the EVIDENCE axis — orthogonal to Enforcement. A scalar “coverage” level would be dishonest: a backend that witnesses denied attempts but not allowed actions is incomparable to one that does the reverse. So evidence is a SET of explicit claims, and composition is set intersection.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

TerminalOutcome

The run’s terminal outcome + exit status are observable.

CapturedStreams

Captured stdout/stderr are observable.

ResourceUsage

CPU/memory/IO resource usage is observable.

AllowedActions

The operations the workload performed are observable.

DeniedAttempts

Each attempt the boundary blocked is observable.

FilesystemDelta

Filesystem creations/modifications are observable.

ProcessTree

The child process tree is observable.

NetworkActivity

Network connections/traffic are observable.

ArtifactLineage

Produced-artifact provenance is observable.

MechanismAttestation

The confinement mechanism actually applied is attestable.

Trait Implementations

impl Clone for EvidenceClaim

fn clone(&self) -> EvidenceClaim

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EvidenceClaim

impl Debug for EvidenceClaim

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EvidenceClaim

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for EvidenceClaim

impl FromIterator<EvidenceClaim> for EvidenceSet

fn from_iter<I: IntoIterator<Item = EvidenceClaim>>(iter: I) -> Self

Creates a value from an iterator.

impl Hash for EvidenceClaim

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for EvidenceClaim

fn cmp(&self, other: &EvidenceClaim) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for EvidenceClaim

fn eq(&self, other: &EvidenceClaim) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for EvidenceClaim

fn partial_cmp(&self, other: &EvidenceClaim) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for EvidenceClaim

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for EvidenceClaim