Enum ContractProvenance 

pub enum ContractProvenance {
    OperatorSupplied,
    HumanConfirmed,
    RuntimeGenerated,
    ModelDerived,
}

Where an outcome contract’s bytes came from.

This exists because the autonomous no-change path is gated on it, which makes it a security boundary rather than bookkeeping. A model that can author its own contract and then cite that contract passing as proof it need not work has an escape hatch from every hard task.

Variants

OperatorSupplied

Supplied as bytes by the operator (--contract-file).

HumanConfirmed

A human confirmed it through the contract gate before work began.

RuntimeGenerated

Generated by the runtime from telemetry it collected itself, before this session existed — e.g. a reproduction attached to a report CAR filed from a DurableFixProposal. External to the session in the sense that matters: neither this session’s model nor a member of the public wrote it.

ModelDerived

Derived by this session’s model, typically from an issue body. Never trusted, at any tier. An issue body is untrusted input — on a public tracker it is attacker-controlled — so a contract derived from one is a stranger’s definition of done.

Implementations

impl ContractProvenance

pub fn is_trusted(&self) -> bool

The single definition of “trusted”. Every caller must route through this rather than matching the variants itself, so widening it is one visible edit rather than a drift across call sites.

pub fn as_str(&self) -> &'static str

Trait Implementations

impl Clone for ContractProvenance

fn clone(&self) -> ContractProvenance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ContractProvenance

impl Debug for ContractProvenance

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContractProvenance

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ContractProvenance

impl PartialEq for ContractProvenance

fn eq(&self, other: &ContractProvenance) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ContractProvenance

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContractProvenance