Enum Risk 

#[non_exhaustive]
pub enum Risk {
    Low,
    Medium,
    High,
    Critical,
}

How dangerous a particular ambient authority call is.

Risk levels are ordered: Low < Medium < High < Critical. The CLI’s --min-risk and --fail-on flags use this ordering to filter and gate findings.

Assignment rationale

Level	Meaning	Examples
Low	Read-only metadata, unlikely to leak secrets	fs::metadata, env::current_dir
Medium	Can read data or create resources	fs::read, env::var, File::open
High	Can write, delete, or open network connections	fs::write, TcpStream::connect
Critical	Can destroy data or execute arbitrary code	remove_dir_all, Command::new

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Low

Read-only metadata or low-impact queries.

Medium

Can read sensitive data or create resources.

High

Can write data, delete files, or open network connections.

Critical

Can destroy data or execute arbitrary code.

Implementations

impl Risk

pub fn label(&self) -> &'static str

Returns the lowercase label used in JSON output and CLI flags (e.g., "high").

pub fn parse(s: &str) -> Self

Parses a risk level from a string. Returns Risk::Low for unrecognized input.

Accepts: "low", "medium", "high", "critical".

Trait Implementations

impl Clone for Risk

fn clone(&self) -> Risk

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Risk

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Risk

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Risk

fn cmp(&self, other: &Risk) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Risk

fn eq(&self, other: &Risk) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Risk

fn partial_cmp(&self, other: &Risk) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Risk

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for Risk

impl Eq for Risk

impl StructuralPartialEq for Risk