pub enum Decision {
Conformant,
CollectorOff(String),
Refuse(String),
Unknown(String),
}Expand description
What the gate decided, for the caller to act on and report.
Variants§
Conformant
Both surfaces enforced (or a read-only workspace, which writes nothing and so stands on neither).
CollectorOff(String)
If-Match on DELETE is not enforced: the collector is off for
this workspace and objects it would have taken are left behind.
Refuse(String)
A conditional PUT was ACCEPTED when it had to be refused. The workspace must not be published.
Unknown(String)
The probe could not write its own object, so the store answered nothing: a read-only credential, a bucket policy, an endpoint that is down. NOT a verdict — the verb runs exactly as it did before this gate existed and fails with its own, accurate error.
Refusing here would be refusing an ERROR while reporting an
ANSWER: lean/e2e/access/read-grant-minio.sh D1 runs a
read-write syncer on read-only credentials on purpose, and the
operator it hands a diagnosis to deserves “403”, not “this store
does not enforce conditional writes”.