Struct FileProvenanceLedger 

pub struct FileProvenanceLedger { /* private fields */ }

Session-scoped map from a workspace path to the untrusted origin its content was last known to carry. Owned by the agent host session so it drops with the session (no cross-session leak), mirroring the super::TaintRecord ledger.

Implementations

impl FileProvenanceLedger

pub fn record(&mut self, path: &str, origin: &str)

Record that path now holds content of untrusted origin. The first origin sticks (a path does not become “more trusted” by a later write); empty paths are ignored.

pub fn classify(&self, path: &str) -> Option<(TrustLevel, String)>

Trust classification for a read of path. Some((Untrusted, origin)) when the path is a known untrusted-origin file; None otherwise. Shaped like super::classify_result_trust so the read path can .or_else(...) the two.

pub fn references_tainted_path( &self, command: &str, ) -> Option<(TrustLevel, String)>

Trust classification for an Execute-kind tool whose command string names a tainted-origin path — the laundering read (cat vendor/dep/README) that evades structured Self::classify because the path never appears as a path argument. Splits the command into path-shaped tokens (maximal runs of path characters, so shell quoting / pipes / redirects are natural delimiters), normalizes each, and returns the first that is a known untrusted-origin file. Matching is exact on the normalized key, so a short tainted name never substring-matches an unrelated path. None when the command names no tainted path (fail-open, never a false quarantine).

pub fn is_empty(&self) -> bool

pub fn len(&self) -> usize

Trait Implementations

impl Clone for FileProvenanceLedger

fn clone(&self) -> FileProvenanceLedger

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FileProvenanceLedger

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for FileProvenanceLedger

fn default() -> FileProvenanceLedger

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for FileProvenanceLedger

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FileProvenanceLedger

impl PartialEq for FileProvenanceLedger

fn eq(&self, other: &FileProvenanceLedger) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FileProvenanceLedger

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FileProvenanceLedger