Enum CustomerState 

pub enum CustomerState {
    BlockedByPolicy,
    Compromised,
    Malicious,
    RansomwareLinked,
    ActivelyExploited,
    Vulnerable,
    NotYetAssessed,
    Clean,
}

The 8 canonical customer-facing states, severity order (highest first) per the BD-ratified ordering in §1: Blocked-by-policy, Compromised, Malicious, Ransomware-linked, Actively-exploited, Vulnerable, Not-yet-assessed, Clean.

Variants

BlockedByPolicy

Customer’s OWN policy rule blocked this package (operative gate).

Compromised

Tampered-with in a supply-chain attack (curated compromise list).

Malicious

Known-malicious package (malware / typosquat).

RansomwareLinked

Vulnerability tied to active ransomware campaigns.

ActivelyExploited

Vulnerability being exploited in the wild (CISA KEV).

Vulnerable

Has known CVEs (review + upgrade).

NotYetAssessed

No verdict on file yet — fail-closed needs-review.

Clean

No known issues found.

Implementations

impl CustomerState

pub fn from_wire(source: &str) -> CustomerState

Derive the customer state from the wire source string (the values in crate::envelope::ALL_VERDICT_SOURCES). Unknown / future variants fail CLOSED to NotYetAssessed (warn) — never silently Clean.

Two variants carry a note:

• DM_THRESHOLD_BLOCK → BlockedByPolicy (the customer’s own rule). The spec also routes a DM_THRESHOLD_BLOCK from the curated supply-chain-compromise list (CLEANLIB-177) to Compromised, but that distinction is carried by which rule fired, not by source alone, and 177 is not yet shipped. Until 177 lands + the App tags curated-list blocks, every DM_THRESHOLD_BLOCK is the customer’s policy. See from_block_origin.
• VECTOR_VERDICT is the legacy pre-176 full-eval source, preserved for backward-compat. Post-176 the App projects findings into the specific CVE_FINDING* variants, so a bare VECTOR_VERDICT reaching a render surface is a legacy non-clean signal → Vulnerable (fail-safe).

pub fn from_block_origin( source: &str, curated_compromise: bool, ) -> CustomerState

Same as from_wire but lets the caller resolve the DM_THRESHOLD_BLOCK ambiguity when it knows the block origin. Use once CLEANLIB-177 ships and the App tags curated-list blocks: curated_compromise = true routes DM_THRESHOLD_BLOCK to Compromised instead of BlockedByPolicy.

pub fn as_str(self) -> &'static str

Stable machine string for --output json state field + structured MCP/SDK fields. snake_case, customer-vocabulary, NOT the wire variant.

pub fn label(self) -> &'static str

Customer-facing display label (Title-case, no codenames). §2 of spec.

pub fn copy(self) -> &'static str

One-line, action-first customer copy (no codenames, no raw tier words). §2 of spec — verbatim.

pub fn tier(self) -> Tier

Derive tier (block / warn / clean). NotYetAssessed is fail-closed → Warn. Per §1 “Tier” column.

pub fn exit_code(self) -> i32

Process exit code for the CLI gate.

pub fn color_token(self) -> &'static str

CSS custom-property name for the soft severity token (extension + SDKs consume these for theming). §1 “Soft colour token” column.

pub fn color_hex(self) -> &'static str

Soft severity hex (draft-ratified working palette, §5). Brand cyan for Clean; distinct mauve for policy so “your rule” reads apart from “our finding” reds.

pub fn emoji(self) -> &'static str

Text-surface emoji for MCP human_message + CLI text output. §1 “MCP/CLI emoji” column. One concept per tier; states differentiate by label + colour, not a bespoke glyph family (§5 — reuse, don’t cut).

pub fn all() -> [CustomerState; 8]

All 8 states, severity order (highest first). For exhaustive contract tests + doc generation.

Trait Implementations

impl Clone for CustomerState

fn clone(&self) -> CustomerState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CustomerState

impl Debug for CustomerState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CustomerState

impl Hash for CustomerState

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CustomerState

fn eq(&self, other: &CustomerState) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CustomerState