Struct EnvelopeViolation 

pub struct EnvelopeViolation {
    pub axis: EnvelopeAxis,
    pub entry: String,
    pub parent_entry: Option<String>,
}

The first axis a child exceeded its parent on, with the exact declaration that did it.

Carries one offending entry rather than every difference: the operator’s next action is to edit one line, and a comparison that stops at the first failure cannot be read as an exhaustive audit of what else would have been refused.

Fields

axis: EnvelopeAxis

entry: String

The child declaration that exceeded, rendered as the operator wrote it: one allow-list entry, one install entry, one filesystem scope, one store name, one containment class, or the literal true for a boolean widening.

Empty on the one axis where the offending declaration is an absence: a child that declares no capabilities.filesystem.scope under a parent that declares one reaches the whole workdir, which is wider than the parent’s scope.

parent_entry: Option<String>

The parent’s own value, on the two axes that hold a single value rather than a list: the parent’s capabilities.filesystem.scope and its containment floor. None on every list axis and on the two boolean ones, where the parent’s value is implied by the refusal itself — it does not hold the entry, and the boolean is false.

Trait Implementations

impl Clone for EnvelopeViolation

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnvelopeViolation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EnvelopeViolation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for EnvelopeViolation

impl PartialEq for EnvelopeViolation

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EnvelopeViolation