Struct PolicyRule 

pub struct PolicyRule {
    pub name: String,
    pub description: Option<String>,
    pub when: RuleWhen,
    pub require: BTreeMap<String, Vec<String>>,
    pub mask: Vec<String>,
    pub deny: bool,
    pub on_runtime: RuntimeAction,
}

Available on crate feature policy only.

A rule over one label: which sinks it applies to, and what satisfies it.

Fields

name: String

Stable rule name — named in every violation, audit entry and metric.

description: Option<String>

when: RuleWhen

What the rule applies to.

require: BTreeMap<String, Vec<String>>

Sink attributes a labelled column’s destination must carry, each with its allowed values: { residency: [eu], environment: [prod, staging] }. A sink missing the attribute violates the rule.

mask: Vec<String>

Mask actions that satisfy the rule instead: a column masked by one of these (redact / hash / tokenize / partial) may land anywhere the rule would otherwise refuse. Empty = masking does not satisfy the rule.

deny: bool

The labelled column may not reach a matching sink at all (unless a listed mask action applies).

on_runtime: RuntimeAction

What a run does when a value detector finds the label at run time in a column the static pass could not see: fail the run before the page is written, or quarantine the offending records to the DLQ.

Trait Implementations

impl Clone for PolicyRule

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicyRule

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PolicyRule

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for PolicyRule

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for PolicyRule

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PolicyRule

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyRule