List of all items

Structs

• authority::AppliedRule
• authority::AuthorityDerivation
• authority::AuthorityInput
• authority::AuthorityOutput
• authority::DeclaredAuthority
• authority::ImposedAuthority
• authority::ObservedAuthority
• authority::ProvenAuthority
• authority::declared::DeclaredAuthoritySurface
• events::CgroupSample
• events::EvidenceBundleRefs
• events::NftRuleCounter
• events::Provenance
• events::SubjectUrn
• events::TapStats
• noop_broker::NoopSecretBroker
• observability::SensitiveFieldVisitor
• policy::AuthorizationPolicy
• policy::AuthorizationPolicyDocument
• policy::PolicyPackDocument
• policy::PolicyPackSpec
• policy::PolicyRules
• policy::PolicyViolation
• ports::CellHandle
• ports::NoopEventSink
• ports::NoopExportSink
• ports::NoopInferenceBroker
• ports::RuntimeSecretLeaseRequest
• ports::TeardownReport
• principal::AuthorityScope
• principal::AuthorityScopeViolation
• principal::DelegateId
• principal::ExternalId
• principal::OperatorId
• principal::PlatformId
• state_projection::CellStateProjection
• state_projection::CellStateSnapshot
• state_projection::ExportProjectionRecord
• trust_keys::SignedEventEnvelopeV1
• types::AuthorityBundle
• types::AuthorityCapability
• types::AuthorityDerivationToken
• types::AuthorityNarrowing
• types::AuthoritySignature
• types::CdnAuthority
• types::CdnProvider
• types::CloudEventV1
• types::Correlation
• types::DnsAuthority
• types::DnsAuthorityDnssecFailed
• types::DnsAuthorityDrift
• types::DnsAuthorityRebindRejected
• types::DnsAuthorityRebindThreshold
• types::DnsQueryEvent
• types::DnsRebindingPolicy
• types::DnsRefreshPolicy
• types::DnsResolver
• types::DnsResolverDnssecPolicy
• types::EgressRule
• types::EnvironmentSpec
• types::ExecutionCellDocument
• types::ExecutionCellSpec
• types::ExportArtifact
• types::ExportArtifactMetadata
• types::ExportChannels
• types::ExportReceipt
• types::GitIngress
• types::HomeostasisSignal
• types::HttpExportTarget
• types::InferenceMessage
• types::InferenceRequest
• types::InferenceResponse
• types::Ingress
• types::Lifetime
• types::NetworkFlowDecision
• types::OciImageIngress
• types::PlacementSpec
• types::PolicyRef
• types::RoleId
• types::RunCpuMax
• types::RunLimits
• types::RunSpec
• types::S3ExportTarget
• types::SecretView
• types::SignedTrustKeysetEnvelope
• types::TelemetryFieldSplit
• types::TelemetryRateLimits
• types::TelemetrySpec
• types::TrustKeysetSignature
• types::WorkloadIdentity

Enums

• authority::AuthorityInputType
• authority::BindingStatus
• authority::EpistemicStatus
• authority::ProvenAuthorityArtifact
• authority::Rule
• authority::RuleClass
• authority::ValidationError
• authority::derivation_result::AuthorityValidationResult
• error::CellosError
• events::IdentityFailureOperation
• events::LifecycleDestroyOutcome
• events::LifecycleReason
• events::LifecycleResidueClass
• events::LifecycleTerminalState
• events::ResidueClass
• events::SubjectUrnError
• principal::Capability
• principal::Principal
• principal::PrincipalParseError
• principal::TrustRoot
• state_projection::ProjectionCurrentState
• state_projection::ProjectionExportStage
• state_projection::ProjectionIdentityStage
• state_projection::ProjectionLifecycleStage
• types::AuthorityComponent
• types::DnsAuthorityDnssecFailureReason
• types::DnsQueryDecision
• types::DnsQueryReasonCode
• types::DnsQueryType
• types::DnsRefreshStrategy
• types::DnsResolverProtocol
• types::ExportReceiptTargetKind
• types::ExportTarget
• types::InferenceRole
• types::NetworkFlowDecisionOutcome
• types::NetworkFlowDirection
• types::SecretDeliveryMode
• types::TelemetryChannel
• types::WorkloadIdentityKind

Traits

• authority::GuestEventBuilder
• ports::CellBackend
• ports::EventSink
• ports::ExportSink
• ports::InferenceBroker
• ports::SecretBroker

Functions

• authority::canonical_class_for_rule
• authority::declared::validate_declared_authority_surface
• authority::derivation_result::validate_authority_derivation
• authority::epistemic_for_class_set
• authority::max_tier_for_class
• cgroup_id::sanitize_cgroup_leaf_segment
• events::authz_rejected_data_v1
• events::cell_subject_urn
• events::cloud_event_v1_cortex_dispatched
• events::cloud_event_v1_dns_authority_dnssec_failed
• events::cloud_event_v1_dns_authority_drift
• events::cloud_event_v1_dns_authority_rebind_rejected
• events::cloud_event_v1_dns_authority_rebind_threshold
• events::cloud_event_v1_dns_query
• events::cloud_event_v1_dns_query_permitted
• events::cloud_event_v1_dns_query_refused
• events::cloud_event_v1_firecracker_pool_checkout
• events::cloud_event_v1_formation_completed
• events::cloud_event_v1_formation_created
• events::cloud_event_v1_formation_degraded
• events::cloud_event_v1_formation_failed
• events::cloud_event_v1_formation_launching
• events::cloud_event_v1_formation_running
• events::cloud_event_v1_keyset_verification_failed
• events::cloud_event_v1_keyset_verified
• events::cloud_event_v1_network_flow_decision
• events::command_completed_data_v1
• events::compliance_summary_data_v1
• events::compliance_summary_data_v1_with_subjects
• events::cortex_dispatched_data_v1
• events::dns_authority_dnssec_failed_data_v1
• events::dns_authority_drift_data_v1
• events::dns_authority_rebind_rejected_data_v1
• events::dns_authority_rebind_threshold_data_v1
• events::dns_query_data_v1
• events::dns_query_permitted_data_v1
• events::dns_query_refused_data_v1
• events::evidence_bundle_emitted_data_v1
• events::export_completed_data_v1
• events::export_completed_data_v2
• events::export_failed_data_v2
• events::firecracker_pool_event_data_v1
• events::homeostasis_signal_data_v1
• events::homeostasis_violation_data_v1
• events::identity_failed_data_v1
• events::identity_materialized_data_v1
• events::identity_revoked_data_v1
• events::keyset_verification_failed_data_v1
• events::keyset_verified_data_v1
• events::lifecycle_destroyed_data_v1
• events::lifecycle_destroyed_data_v1_typed
• events::lifecycle_started_data_v1
• events::manifest_failed_data_v1
• events::network_flow_decision_data_v1
• events::observability_container_security_data_v1
• events::observability_dns_resolution_data_v1
• events::observability_dns_target_set_data_v1
• events::observability_fs_touch_export_data_v1
• events::observability_host_cgroup_data_v1
• events::observability_host_fc_metrics_data_v1
• events::observability_host_nftables_data_v1
• events::observability_host_tap_data_v1
• events::observability_l7_egress_decision_data_v1
• events::observability_network_enforcement_data_v1
• events::observability_network_policy_data_v1
• events::observability_network_scope_data_v1
• events::observability_process_spawned_data_v1
• events::policy_rejected_data_v1
• hostname_allowlist::matches_allowlist
• observability::is_sensitive_field_name
• policy::check_policy_pack_version_compatibility
• policy::spec_matches_placement_scope
• policy::validate_authorization_policy
• policy::validate_policy_pack_document
• policy::validate_secret_refs_against_allowlist
• policy::validate_spec_against_policy
• redaction::redact_url_credentials_for_logs
• redaction::redact_url_if_echoed_in_text
• spec_validation::authority_derivation_signing_payload
• spec_validation::check_policy_pack_version
• spec_validation::enforce_derivation_scope_policy
• spec_validation::validate_execution_cell_document
• spec_validation::validate_tenant_id_for_subject_token
• spec_validation::verify_authority_derivation
• spec_validation::verify_signed_trust_keyset_chain
• spec_validation::verify_signed_trust_keyset_envelope
• trust_keys::canonical_event_signing_payload
• trust_keys::load_trust_verify_keys_file
• trust_keys::parse_trust_verify_keys
• trust_keys::sign_event_ed25519
• trust_keys::sign_event_hmac_sha256
• trust_keys::verify_signed_event_envelope
• types::canonical_spec_hash
• types::qtype_to_dns_query_type

Constants

• events::FORMATION_COMPLETED_TYPE
• events::FORMATION_CREATED_TYPE
• events::FORMATION_DEGRADED_TYPE
• events::FORMATION_FAILED_TYPE
• events::FORMATION_LAUNCHING_TYPE
• events::FORMATION_RUNNING_TYPE
• events::LIFECYCLE_MANIFEST_FAILED_TYPE
• events::TRUST_PLANE_AGGREGATE_EGRESS_FQDN
• events::TRUST_PLANE_BUILTIN_KEYSET_ID
• events::TRUST_PLANE_BUILTIN_L7_KID
• events::TRUST_PLANE_BUILTIN_RESOLVER_KID
• observability::HTTP_STACK_TARGETS
• observability::SENSITIVE_HEADER_NAMES
• policy::MIN_SUPPORTED_POLICY_PACK_VERSION
• policy::POLICY_ALLOW_DOWNGRADE_ENV