Struct SecurityCandidateBoundary 

pub struct SecurityCandidateBoundary {
    pub client_server: bool,
    pub cross_module: bool,
    pub architecture_zone: Option<SecurityZoneCrossing>,
}

The boundary slot of a SecurityCandidate: which structural boundaries the candidate’s flow crosses. A flow that crosses a client/server or module boundary is a stronger review target than a self-contained one; the boundary is fallow’s structural signal over a pure source-sink match.

Two further boundary kinds are RESERVED for a follow-up and are deliberately absent here rather than emitted as always-false: export_visibility (is the sink on a publicly-exported symbol?) and a package boundary (does the flow cross an npm-package edge?). Both need new graph derivation that does not exist today; emitting them as false would misreport “we checked and it does not cross” when fallow has not checked at all.

Fields

client_server: bool

Whether the finding crosses a client/server boundary (a "use client" file appears in the trace). True only for client-server-leak today; tainted-sink candidates carry no client/server marker.

cross_module: bool

Whether an untrusted source reaches the sink across one or more value-import (module) hops. Derived from the reachability hop count.

architecture_zone: Option<SecurityZoneCrossing>

The architecture-zone crossing when the anchor participates in a declared boundary-rule violation in the same run. None when it crosses no declared zone boundary.

Trait Implementations

impl Clone for SecurityCandidateBoundary

fn clone(&self) -> SecurityCandidateBoundary

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityCandidateBoundary

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityCandidateBoundary

fn default() -> SecurityCandidateBoundary

Returns the “default value” for a type.

impl Eq for SecurityCandidateBoundary

impl PartialEq for SecurityCandidateBoundary

fn eq(&self, other: &SecurityCandidateBoundary) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SecurityCandidateBoundary

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecurityCandidateBoundary