pub struct Withheld {
pub rule: String,
pub func: String,
pub filter: &'static str,
}Expand description
⟨0.24⟩ ONE (rule, function) THE GATE COULD NOT EVALUATE — SPEC §3.1: “a rule FIRES on a function
only where the match is evidenced by that function’s own entry, and is WITHHELD exactly where it is
not. Withholding is per (rule, function), never whole-policy.”
A withheld pair is NOT a tolerated one. Tolerating means the evidence was read and did not match;
withholding means there was no evidence to read, and the two must not arrive at a consumer wearing the
same face. The caller decides the disposition — a violation elsewhere dominates (exit 1, disclose), a
sole withholding is a refusal (exit 2) — but it can only do that if the fact reaches it, which is why
this rides out of gate beside the violations instead of being logged here.
Fields§
§rule: StringThe rule’s source line, verbatim (PolicyRule::raw).
func: StringThe function the rule could not be evaluated ON. The same rule may fire on another.
filter: &'static strWhich narrowing filter had nothing to read — "Unknown" or "Net".