Enum SandboxDenialConfidence 

pub enum SandboxDenialConfidence {
    Captured,
    PolicyCorroborated,
    SandboxReported,
    OutputClassified,
    Unknown,
}

How strong the evidence behind a denial is. A denial the sandbox itself recorded is a fact; one inferred from a command’s output text is a judgement, and an analysis that cannot tell them apart will treat a false positive as enforcement.

Variants

Captured

The sandbox’s own denial capture recorded the refused access. The strongest evidence available: the kernel observed it, not the runtime.

PolicyCorroborated

The command named a path that the effective policy independently denies. No capture confirmed it, but the policy did.

SandboxReported

The failure carried a fingerprint the sandbox itself emits, so the sandbox is known to have refused something even though the resource was not confirmed.

OutputClassified

Classified from the command’s own output text alone. The weakest evidence: a command that merely prints sandbox-like wording reaches this level.

Unknown

Unknown variant for forward compatibility.

Trait Implementations

impl Clone for SandboxDenialConfidence

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxDenialConfidence

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxDenialConfidence

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxDenialConfidence

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxDenialConfidence

impl PartialEq for SandboxDenialConfidence

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxDenialConfidence

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxDenialConfidence