Struct SecurityReachability 

pub struct SecurityReachability {
    pub reachable_from_entry: bool,
    pub blast_radius: u32,
    pub crosses_boundary: bool,
}

Graph-derived reachability ranking signal for a security candidate. Computed from the EXISTING module graph (runtime reachability + reverse-dep fan-in) after detection, never proven exploitable. Used to surface candidates that sit on a request/runtime-reachable surface above isolated helpers or scripts.

This is a relative-ordering signal, NOT a confidence or signal_strength score: fallow does not prove the path is exploitable.

Fields

reachable_from_entry: bool

Whether the anchor module is reachable from a runtime/application entry point (route handlers, server entry, framework runtime roots), the closest graph proxy for an external/request input surface. Code reachable only from test entry points does not count.

blast_radius: u32

Number of distinct modules that transitively depend on the anchor module (fan-in via the graph’s reverse-dependency index). A higher value means a wider surface: more call sites could route untrusted input into the sink.

crosses_boundary: bool

Whether the anchor module participates in an architecture-boundary violation found in the same run (as the importing or imported file). Optional pairing: a candidate that also crosses a declared boundary is a stronger review target.

Trait Implementations

impl Clone for SecurityReachability

fn clone(&self) -> SecurityReachability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SecurityReachability

impl Debug for SecurityReachability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SecurityReachability

impl PartialEq for SecurityReachability

fn eq(&self, other: &SecurityReachability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecurityReachability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecurityReachability