Struct GuardedResolver 

pub struct GuardedResolver<'a> { /* private fields */ }

Resolves anchors that may come from elsewhere (Hive facts other engines wrote) without turning the checkout into an oracle: only files the engine may read for knowledge (source admission), and in a git checkout only tracked ones, are ever read. Any other path is Missing without a read, whether it exists or not, so a crafted anchor on .env learns neither its content nor its existence. Such an anchor (a moved file’s old path is gone, so it is never readable) is only looked for elsewhere through the code graph, among readable files. Reads are memoised for the pass; past MAX_RESOLVED_PER_PASS an anchor has no state (None).

Implementations

impl<'a> GuardedResolver<'a>

pub fn for_report(root: &'a Path) -> Self

For a report that leaves the machine: tracked and admitted files.

pub fn local(root: &'a Path) -> Self

For what this engine shows its own agents: admitted files.

pub fn may_read(&mut self, path: &str) -> bool

Whether path may be read for an anchor at all.

pub fn resolve(&mut self, anchor: &CodeAnchor) -> Option<AnchorState>

Where anchor stands now; None only past the per-pass cap.