Enum LoweringPhase 

pub enum LoweringPhase {
    NamespaceCreate,
    FsSetup,
    PrivilegeDrop,
    FdHygiene,
    PolicyInstall,
    Launch,
    Observe,
    Teardown,
}

The ordered setup phase a primitive lowers in.

Declaration order IS setup order — the derived Ord ranks an earlier phase below a later one, so NamespaceCreate < FsSetup < … < Teardown. (Unlike crate::Enforcement, whose derived Ord is deliberately reversed from security strength, here the derived order is the intended order — confinement is built outside-in, then the workload launches, then evidence is observed, then teardown runs.)

Variants

NamespaceCreate

Create namespaces / isolation domains (mount, pid, net, user).

FsSetup

Establish the filesystem view (binds, pivot_root, preopens).

PrivilegeDrop

Drop privileges irreversibly (no_new_privs, setuid/gid, cap drop).

FdHygiene

Sanitize inherited file descriptors (CLOEXEC sweep, handle list).

PolicyInstall

Install enforcement policy (seccomp-BPF, LSM, WFP, Job Object limits).

Launch

Launch the workload inside the now-established confinement.

Observe

Observe the running workload (collect evidence; no new confinement).

Teardown

Tear down / clean up established confinement (best-effort).

Implementations

impl LoweringPhase

pub fn code(self) -> u8

A stable wire code for canonical schedule encoding (NEVER reorder — the schedule digest H_L and the cross-path membrane depend on these being frozen; the derived Ord governs setup order, this governs bytes).

Trait Implementations

impl Clone for LoweringPhase

fn clone(&self) -> LoweringPhase

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for LoweringPhase

impl Debug for LoweringPhase

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for LoweringPhase

impl Hash for LoweringPhase

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for LoweringPhase

fn cmp(&self, other: &LoweringPhase) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for LoweringPhase

fn eq(&self, other: &LoweringPhase) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for LoweringPhase

fn partial_cmp(&self, other: &LoweringPhase) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for LoweringPhase