Skip to main content

AuditAction

Enum AuditAction 

Source
pub enum AuditAction {
    StreamCreated {
        stream_id: StreamId,
        stream_name: StreamName,
        data_class: DataClass,
        placement: Placement,
    },
    EventsAppended {
        stream_id: StreamId,
        count: u32,
        from_offset: Offset,
    },
    TenantSealed {
        tenant_id: TenantId,
        reason: SealReason,
    },
    TenantUnsealed {
        tenant_id: TenantId,
    },
    MaskingPolicyCreated {
        tenant_id: TenantId,
        policy_name: String,
    },
    MaskingPolicyDropped {
        tenant_id: TenantId,
        policy_name: String,
    },
    MaskingPolicyAttached {
        tenant_id: TenantId,
        table_id: u64,
        column_name: String,
        policy_name: String,
    },
    MaskingPolicyDetached {
        tenant_id: TenantId,
        table_id: u64,
        column_name: String,
    },
    UpsertApplied {
        stream_id: StreamId,
        resolution: UpsertResolution,
        from_offset: Offset,
    },
}
Expand description

Actions recorded in the audit log.

Variants§

§

StreamCreated

A new stream was created.

Fields

§stream_id: StreamId
§stream_name: StreamName
§data_class: DataClass
§placement: Placement
§

EventsAppended

Events were appended to a stream.

Fields

§stream_id: StreamId
§count: u32
§from_offset: Offset
§

TenantSealed

AUDIT-2026-04 H-5 — a tenant was sealed for forensic / audit / legal-hold operations. No mutating commands (DDL, DML, AppendBatch, CreateStream) will be accepted against the tenant until an Unseal is applied.

Fields

§tenant_id: TenantId
§reason: SealReason
§

TenantUnsealed

AUDIT-2026-04 H-5 — a previously-sealed tenant was released. Mutating commands are accepted again. Audit trail retains the seal/unseal pair as structured evidence.

Fields

§tenant_id: TenantId
§

MaskingPolicyCreated

A new masking policy was declared via CREATE MASKING POLICY.

Fields

§tenant_id: TenantId
§policy_name: String
§

MaskingPolicyDropped

A masking policy was dropped via DROP MASKING POLICY.

Fields

§tenant_id: TenantId
§policy_name: String
§

MaskingPolicyAttached

A column was attached to a masking policy via ALTER TABLE … SET MASKING POLICY.

Fields

§tenant_id: TenantId
§table_id: u64
§column_name: String
§policy_name: String
§

MaskingPolicyDetached

A column’s masking policy was detached via ALTER TABLE … DROP MASKING POLICY.

Fields

§tenant_id: TenantId
§table_id: u64
§column_name: String
§

UpsertApplied

v0.6.0 Tier 1 #3 — UPSERT — an INSERT ... ON CONFLICT statement was applied atomically. The resolution discriminator lets compliance auditors distinguish insert-vs-update-vs-noop without re-reading the row payload.

Fields

§stream_id: StreamId
§resolution: UpsertResolution

Which branch fired: new row inserted, existing row updated, or the conflict triggered DO NOTHING.

§from_offset: Offset

Offset the single resulting event (if any) lives at. For NoOp the offset equals the pre-upsert head — no event is emitted, but we record the observed stream position so audit replays can reconstruct the exact moment the upsert was applied.

Trait Implementations§

Source§

impl Clone for AuditAction

Source§

fn clone(&self) -> AuditAction

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for AuditAction

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<'de> Deserialize<'de> for AuditAction

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl PartialEq for AuditAction

Source§

fn eq(&self, other: &AuditAction) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Serialize for AuditAction

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl Eq for AuditAction

Source§

impl StructuralPartialEq for AuditAction

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,