Enum AnomalyKind 

#[non_exhaustive]
pub enum AnomalyKind {
    NonZeroReservedSpace {
        reserved: u8,
    },
    DeletedRecordRecovered {
        page: u32,
        offset: usize,
        rowid: i64,
    },
    NonEmptyFreelist {
        free_pages: u32,
    },
    WalUncheckpointedState {
        overlaid_pages: u32,
    },
    PageCountMismatch {
        header_pages: u32,
        file_pages: u32,
    },
}

The classified SQLite forensic anomalies this auditor can grade.

#[non_exhaustive] so WS-E can add carving / WAL / freelist variants without a breaking change; downstream match arms must carry a _ arm.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NonZeroReservedSpace

The header’s reserved-space-per-page field is non-zero. Standard SQLite leaves this at 0; a non-zero value is used by page-level extensions (e.g. encryption such as SQLCipher/SEE, or checksum VFS) and is worth flagging on an evidence database.

Fields

reserved: u8

The reserved bytes per page reported by the header.

DeletedRecordRecovered

A record-shaped cell was recovered from unallocated / free space — consistent with a deleted row that has not yet been overwritten.

Fields

page: u32

1-based page the residue was carved from.

offset: usize

Byte offset of the cell within that page.

rowid: i64

Recovered rowid.

NonEmptyFreelist

The freelist is non-empty: the database holds free (unallocated) pages. Consistent with prior deletions (DELETE without VACUUM); those pages may retain recoverable deleted records.

Fields

free_pages: u32

Number of free pages on the freelist.

WalUncheckpointedState

A -wal sidecar carried committed-but-unflushed page versions that the main database file does not yet reflect. Consistent with an evidence database captured while a write transaction was checkpoint-pending; the main file alone would under-report the true state.

Fields

overlaid_pages: u32

Number of pages the WAL overlay superseded in the main file.

PageCountMismatch

The in-header page count disagrees with the page count implied by the file length. Consistent with truncation, carving, or out-of-band modification of the database file.

Fields

header_pages: u32

Page count recorded in the file header (offset 28).

file_pages: u32

Page count implied by file_len / page_size.

Implementations

impl AnomalyKind

pub fn severity(&self) -> Severity

Severity, derived from the kind.

pub fn code(&self) -> &'static str

Stable, scheme-prefixed machine code (a published contract).

pub fn note(&self) -> String

Human-readable, “consistent with” note.

Trait Implementations

impl Clone for AnomalyKind

fn clone(&self) -> AnomalyKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AnomalyKind

impl PartialEq for AnomalyKind

fn eq(&self, other: &AnomalyKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AnomalyKind