Enum RefusalClass 

pub enum RefusalClass {
    SecretPath,
    OutsideRoot,
    ProtectedPath,
}

Why the I/O boundary refused a path a call asked for. The trail records this class only: like every other entry, never the path, a digest of it or any content.

Variants

SecretPath

A secret-like path (.env, key material, credential files): withheld.

OutsideRoot

Outside the project root, its trusted roots or the Workspace.

ProtectedPath

lean-ctx’s own runtime context, or a symlink inside the jail.

Implementations

impl RefusalClass

pub const fn as_str(self) -> &'static str

Stable identifier committed as reason= into the trail’s action.

pub const fn kind(self) -> SecurityKind

The counted kind: a secret path is withheld content; every other class is the path jail’s existing path_blocked.

pub fn of_jail_error(error: &PathJailError) -> Option<Self>

The class of a path-jail refusal. A path that simply does not exist (or a malformed one) is no boundary decision and has none.

Trait Implementations

impl Clone for RefusalClass

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RefusalClass

impl Debug for RefusalClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for RefusalClass

impl PartialEq for RefusalClass

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RefusalClass