Struct MachineFiles 

pub struct MachineFiles<'a> {
    pub auth: &'a Path,
    pub policy: &'a Path,
}

The two machine-level files a command reads from outside the repository.

Grouped rather than passed as two adjacent &Path positionals, which is what check::run_against and doctor::run_at took. Transposing those compiles, and the transposition is silent in the worst direction: AuthStore has no deny_unknown_fields, so a policy file deserializes into an empty store, and site::load reads an absent auth.toml as no policy at all - so the swap leaves the fleet’s ceiling and refuse_markers unapplied while the run reports as compliance. The same swap hazard auth::Declared and check::refusal::Locations already exist to remove.

Fields

auth: &'a Path

The credential store, from crate::auth::default_path.

policy: &'a Path

The site policy file, from crate::config::site::default_path.