Struct EntryRedactions 

pub struct EntryRedactions { /* private fields */ }

Explicit salted entry commitments hidden from one admitted reader.

This is not a state authorization proof. Callers must first admit the governing Thread and apply the whole-tip and own-tier gate. Directory descent, hash reachability, listings and diffs then use the same predicate.

Implementations

impl EntryRedactions

pub fn extend_overrides( &mut self, entries: &[EntryVisibilityEntry], can_read: impl Fn(&VisibilityTier) -> bool, )

Fold explicit overrides whose tier the caller’s authorized audience cannot read. For ancestor carry-forward, evaluate the override tier alone: the served state’s baseline is checked at the whole-tip gate.

pub fn extend(&mut self, other: &EntryRedactions)

Union restrictions from another endpoint, such as the base of a diff.

pub fn leaves(&self) -> &HashSet<ContentHash>

Opaque commitments used by super::PartialTree::project.

pub fn is_empty(&self) -> bool

Whether no explicit override is hidden for this reader.

pub fn entry_visible(&self, tree: &Tree, index: usize) -> bool

Whether one occurrence is visible. A denied directory must not be descended into, even to resolve a caller-supplied path or object hash. Invalid indices and malformed salted leaves fail closed.

Trait Implementations

impl Clone for EntryRedactions

fn clone(&self) -> EntryRedactions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EntryRedactions

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for EntryRedactions

fn default() -> EntryRedactions

Returns the “default value” for a type.