Enum TrustLevel 

pub enum TrustLevel {
    Mediated,
    Verified,
    Advisory,
}

Trust level of a receipt’s authorization, recording HOW the Kernel participated in the evaluation. Captured per-receipt so downstream consumers (audit, regulatory, dashboards) can reason about the strength of mediation that produced each authorization.

See docs/protocols/STRUCTURAL-SECURITY-FIXES.md and roadmap Phase 1.2.

Variants

Mediated

Tool invocation was synchronously mediated by the kernel (the strongest form: kernel observed the call inline and authorized it). This is the default and the safest baseline.

Verified

Authorization happened inline in the agent process (e.g. a long-running orchestrator embedded the kernel via FFI). The kernel observed the call but did not synchronously mediate it through a separate trust boundary.

Advisory

Authorization was advisory only – the kernel evaluated but the caller may have proceeded regardless. Used for shadow-mode integrations and observability-only deployments.

Implementations

impl TrustLevel

pub fn as_str(&self) -> &'static str

Return the canonical snake_case string for this trust level.

Trait Implementations

impl Clone for TrustLevel

fn clone(&self) -> TrustLevel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustLevel

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TrustLevel

fn default() -> TrustLevel

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TrustLevel

fn deserialize<__D>( __deserializer: __D, ) -> Result<TrustLevel, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for TrustLevel

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustLevel

fn eq(&self, other: &TrustLevel) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TrustLevel

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for TrustLevel

impl Eq for TrustLevel

impl StructuralPartialEq for TrustLevel