Enum FactPayload 

pub enum FactPayload {
    Declaration {
        decl: DeclId,
        logical_id: String,
    },
    Reference {
        from_decl: DeclId,
        to_logical_id: String,
    },
    DependencyEdge {
        from_logical_id: String,
        to_logical_id: String,
        edge_kind: String,
    },
    DynamicSqlEvidence {
        site: String,
    },
    DbLinkReference {
        object: String,
        db_link: String,
    },
    Opacity {
        target_logical_id: String,
        reason: String,
    },
    ResolutionReport {
        reference: String,
        strategy: String,
    },
    Privilege {
        grantee: String,
        privilege: String,
        on: String,
    },
    ConstantValue {
        unit_logical_id: String,
        name: String,
        value: ConstantValue,
    },
    ValueSet {
        unit_logical_id: String,
        name: String,
        value_set: ValueSet,
    },
    StringShape {
        unit_logical_id: String,
        name: String,
        shape: StringShape,
    },
    Taint {
        unit_logical_id: String,
        name: String,
        kinds: Vec<TaintKind>,
    },
    Sanitizer {
        unit_logical_id: String,
        name: String,
        cleansed_by: Vec<TaintCleanser>,
    },
    ExceptionHandler {
        unit_logical_id: String,
        scope: String,
        body_class: String,
    },
    CursorForLoop {
        unit_logical_id: String,
        loop_var: String,
        has_body_dml: bool,
    },
    MissingInstrumentation {
        unit_logical_id: String,
    },
    HardcodedCredential {
        unit_logical_id: String,
        marker: String,
    },
    InvokerRights {
        unit_logical_id: String,
    },
    RefCursorReturn {
        unit_logical_id: String,
    },
    DmlInFunction {
        unit_logical_id: String,
    },
    UnboundedBulkCollect {
        unit_logical_id: String,
    },
    DeprecatedFeature {
        unit_logical_id: String,
        feature: String,
    },
    DeterministicMisuse {
        unit_logical_id: String,
        construct: String,
    },
    MutatingTableTrigger {
        unit_logical_id: String,
        table: String,
    },
    LogWithoutReraise {
        unit_logical_id: String,
    },
    CrossSchemaWrite {
        unit_logical_id: String,
        target: String,
    },
    SensitivePublicSynonym {
        unit_logical_id: String,
        synonym: String,
        target: String,
    },
    IsNullOnIndexedColumn {
        unit_logical_id: String,
        column: String,
    },
}

Discriminated payload — one variant per FactKind. The per-family types are intentionally lightweight; consumers that need richer detail re-fetch from the originating crate’s model (e.g. lineage’s LineageResult).

Variants

Declaration

Fields

decl: DeclId

logical_id: String

Reference

Fields

from_decl: DeclId

to_logical_id: String

DependencyEdge

Fields

from_logical_id: String

to_logical_id: String

edge_kind: String

DynamicSqlEvidence

Fields

site: String

DbLinkReference

Fields

object: String

db_link: String

Opacity

Fields

target_logical_id: String

reason: String

ResolutionReport

Fields

reference: String

strategy: String

Privilege

Fields

grantee: String

privilege: String

on: String

ConstantValue

A variable/expression with a compile-time constant value in the flow lattice. name is normalized to the analyzer’s semantic identifier for that value inside unit_logical_id.

Fields

unit_logical_id: String

name: String

value: ConstantValue

ValueSet

A variable/expression whose possible values are bounded by the flow lattice. ValueSet::Top is intentionally not emitted: absence of this fact means “unbounded/unmeasured”, not safety.

Fields

unit_logical_id: String

name: String

value_set: ValueSet

StringShape

The string-shape abstraction for a variable/expression. SAST and lineage can consume this without re-walking the raw expression tree.

Fields

unit_logical_id: String

name: String

shape: StringShape

Taint

Live taint kinds flowing into a variable/expression.

Fields

unit_logical_id: String

name: String

kinds: Vec<TaintKind>

Sanitizer

Sanitizers observed in a value’s derivation. This is evidence for reports; it is never proof of safety by itself.

Fields

unit_logical_id: String

name: String

cleansed_by: Vec<TaintCleanser>

ExceptionHandler

An EXCEPTION WHEN ... THEN ... handler. scope is the caught condition (others or a named exception); body_class classifies the handler body so syntactic rules can decide without re-parsing: noop (only NULL; — QUAL001 swallowed exception), commit / rollback (QUAL004 transaction control in a handler), or other.

Fields

unit_logical_id: String

scope: String

body_class: String

CursorForLoop

A cursor FOR loop (FOR <var> IN (<query>|<cursor>) LOOP … END LOOP;). has_body_dml is true when the loop body contains a row-level INSERT/UPDATE/DELETE/MERGE — PERF001 flags any cursor-FOR-loop as a bulk-collect candidate; PERF002 flags the has_body_dml subset as a FORALL candidate. Conservative (R13): an ambiguous shape yields no fact rather than a wrong one.

Fields

unit_logical_id: String

loop_var: String

has_body_dml: bool

MissingInstrumentation

A routine body in which no recognized instrumentation call (logging / tracing / audit) was found. STYLE001 (opt-in, per house policy) decides whether that is a finding; the fact only reports the absence, never asserts a violation.

Fields

unit_logical_id: String

HardcodedCredential

A string literal that is, by strong syntactic context, a hardcoded secret (IDENTIFIED BY '…', an assignment to a password/secret/token-named target, or a password => '…' named argument). marker records the matched context so SEC003 can explain the finding. Conservative (R13): only emitted when a literal directly follows a credential marker.

Fields

unit_logical_id: String

marker: String

InvokerRights

The unit declares AUTHID CURRENT_USER (invoker’s rights). Resolution of privileges is deferred to call time, which widens the trust surface — SEC004 flags it for review (it is frequently intentional, so the rule is advisory, not a hard defect).

Fields

unit_logical_id: String

RefCursorReturn

A function whose RETURN type is a REF CURSOR (SYS_REFCURSOR / REF CURSOR). Hands an open cursor to the caller — a resource-ownership and (when the cursor wrapped dynamic SQL) injection-amplification concern. SEC007.

Fields

unit_logical_id: String

DmlInFunction

A FUNCTION whose body performs row-level DML (INSERT/UPDATE/DELETE/MERGE). Side-effecting functions break purity, are unsafe in SQL/parallel/replication contexts, and surprise callers. QUAL007.

Fields

unit_logical_id: String

UnboundedBulkCollect

A BULK COLLECT INTO with no LIMIT in the same statement — the entire result set is materialized into PGA memory unbounded. QUAL003.

Fields

unit_logical_id: String

DeprecatedFeature

A well-known deprecated / legacy construct (feature names the match: dbms_job, legacy (+) outer join, … work transaction-control keyword). QUAL005.

Fields

unit_logical_id: String

feature: String

DeterministicMisuse

A function marked DETERMINISTIC whose body contains a non-deterministic construct (DML, query, SYSDATE/ SYSTIMESTAMP, DBMS_RANDOM, sequence .NEXTVAL). QUAL008.

Fields

unit_logical_id: String

construct: String

MutatingTableTrigger

A row-level (FOR EACH ROW) trigger whose body references its own base table in a query/DML — ORA-04091 mutating- table hazard. QUAL006.

Fields

unit_logical_id: String

table: String

LogWithoutReraise

An exception handler that logs (or otherwise instruments) but neither re-raises nor signals, silently continuing — the failure is recorded yet swallowed. QUAL002.

Fields

unit_logical_id: String

CrossSchemaWrite

A DML statement whose target object is schema-qualified to a schema other than the unit’s own — a cross-schema write surface. target is schema.object. DEP001.

Fields

unit_logical_id: String

target: String

SensitivePublicSynonym

A CREATE PUBLIC SYNONYM whose synonym or target name matches a sensitivity heuristic (credential/PII/finance). Public synonyms are visible to every account, so exposing a sensitive object through one widens its reach. SEC005.

Fields

unit_logical_id: String

synonym: String

target: String

IsNullOnIndexedColumn

A <col> IS NULL predicate on a column that the same analyzed source declares an index on (CREATE INDEX … (col …)). A B-tree index does not store all-NULL keys, so the predicate cannot use that index — a silent full-scan. PERF003. (Catalog-only indexes are out of this source-level scope.)

Fields

unit_logical_id: String

column: String

Implementations

impl FactPayload

pub fn kind(&self) -> FactKind

Discriminate the family without matching the full enum.

Trait Implementations

impl Clone for FactPayload

fn clone(&self) -> FactPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FactPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FactPayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FactPayload

impl PartialEq for FactPayload

fn eq(&self, other: &FactPayload) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FactPayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FactPayload