Struct SectorAccessPolicy 

pub struct SectorAccessPolicy {
    pub name: String,
    pub sector: String,
    pub field_tiers: HashMap<String, AccessTier>,
    pub default_tier: AccessTier,
}

Maps JSON field names to their minimum access tier.

Fields not listed fall back to Self::default_tier. Matching is by normalized leaf key name (case- and separator-insensitive), so a policy key disassemblyInstructions also covers a payload key disassembly_instructions — closing the casing/nesting drift that let elevated fields leak at the Public tier (crypto Gap 6).

Caution — leaf matching is path-insensitive. A policy key matches that leaf wherever it appears, at any depth. Do not elevate a generic leaf name shared across objects (e.g. name, value, country, address): such a key would redact facility.address and manufacturer.address alike, over-redacting Annex III public fields. Use only specific, unambiguous field names (e.g. dueDiligenceUrl, svhcSubstances). Gating a shared leaf on a single path would require making the matcher path-aware first.

Fields

name: String

Human-readable policy name (e.g., "textile-v1.1").

sector: String

The sector this policy applies to.

field_tiers: HashMap<String, AccessTier>

Map of JSON field name → minimum access tier. A listed field is matched wherever it appears in the document (any nesting depth), by normalized key.

default_tier: AccessTier

Tier applied to fields not listed in field_tiers. Defaults to Public (backward-compatible: only elevated fields need listing). Set to Confidential for a true default-deny (fail-closed) policy, where every public field must be explicitly listed as Public.

Implementations

impl SectorAccessPolicy

pub fn from_catalog(catalog: &SectorCatalog, sector_key: &str) -> Option<Self>

Build a sector’s access policy from the catalog’s declared per-field tiers, folding in the universal confidential fields.

This works for every sector with no per-sector Rust code — the tiers are data in the sector manifests (access_tiers). Returns None if sector_key is not in the catalog.

pub fn passport_default() -> Self

Default access policy for top-level passport fields (sector-agnostic).

pub fn tier_for_field(&self, field_name: &str) -> AccessTier

Get the minimum access tier for a field, matched by normalized key name (case/separator-insensitive). Unlisted fields fall back to default_tier.

Trait Implementations

impl Clone for SectorAccessPolicy

fn clone(&self) -> SectorAccessPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SectorAccessPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SectorAccessPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SectorAccessPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.