Enum TableInstanceRisk 

#[non_exhaustive]
pub enum TableInstanceRisk {
    None,
    RowidExceedsAutoincHighwater {
        table: String,
        rowid: i64,
        seq: i64,
    },
    SidecarSchemaChanged {
        table: String,
    },
}

A non-overclaiming diagnostic HINT about a recovered record’s relationship to the instance of the table it was attributed to — ORTHOGONAL to Attribution (it never changes the tier, the routing, or the table claim).

Detector A (docs/design/drop-recreate-attribution.md): when a record attributed Known(T) has a rowid exceeding T’s AUTOINCREMENT sqlite_sequence high-water mark, that is consistent with residue from a prior incarnation of T (a drop-recreate reset sqlite_sequence) — but it is not proof: the Codex review confirmed rowid > seq is equally reachable by an UPDATE of the rowid, a manual sqlite_sequence edit, or a current-instance deletion. So the flag is surfaced as a hint that names its evidence, and the examiner draws the conclusion. The note never asserts “predecessor”.

#[non_exhaustive] so the documented follow-up SidecarSchemaChanged variant (Detector B — a sidecar -wal/-journal DDL boundary) can be added without a breaking change.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

None

No instance-provenance hint applies to this record.

RowidExceedsAutoincHighwater

The record was attributed Known(table), table is AUTOINCREMENT, has a sqlite_sequence entry seq, and the record’s rowid exceeds it. The current instance never assigned a rowid above seq via INSERT, so this is consistent with prior-incarnation residue — and equally with an UPDATE to the rowid, a sqlite_sequence edit, or a current-instance deletion.

Fields

table: String

The live table the record was attributed to.

rowid: i64

The record’s recovered rowid (the value exceeding the high-water mark).

seq: i64

The table’s AUTOINCREMENT high-water mark (sqlite_sequence.seq).

SidecarSchemaChanged

Detector B (docs/design/drop-recreate-attribution.md): the record was attributed Known(table), a -wal/-journal sidecar is in play, and the sidecar’s PRIOR sqlite_master for table is absent OR carries a different CREATE SQL text than the current schema — an UNAMBIGUOUS table-level schema change within the captured window. It is consistent with a CREATE/ALTER or a drop+recreate of table, so residue attributed to table may predate the current schema. It is table-level, NOT row-level provenance, and deliberately does NOT fire on a rootpage move with identical CREATE SQL (a VACUUM), a schema-cookie advance alone, or a same-schema drop+recreate (indistinguishable from a benign page move).

Fields

table: String

The live table whose sidecar prior schema differs from the current.

Implementations

impl TableInstanceRisk

pub fn note(&self) -> String

A human, evidence-bearing note for the examiner — or "" for TableInstanceRisk::None. The wording deliberately states what the observation is consistent with and lists the equally-consistent benign explanations; it never asserts the row is a predecessor.

pub fn token(&self) -> String

A short, stable provenance token for column/field output (null-like for TableInstanceRisk::None → empty string), carrying the evidence inline: rowid_exceeds_autoinc_highwater(r=…,seq=…).

Trait Implementations

impl Clone for TableInstanceRisk

fn clone(&self) -> TableInstanceRisk

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TableInstanceRisk

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TableInstanceRisk

impl PartialEq for TableInstanceRisk

fn eq(&self, other: &TableInstanceRisk) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TableInstanceRisk