Struct RootedUnitSource 

pub struct RootedUnitSource { /* private fields */ }

A rooted source opened ONCE for a read in admitted units: the bounded import read of a history transcript above the read cap (core::import).

The path decision and the open are those of the rooted admitted reader: path jail and secret-path rule first, then one descriptor-relative no-follow open under the root. Everything after that — the size, every byte, every admission — is taken from THIS descriptor; the path is never opened a second time. The raw bytes stay with the caller only until Self::admit_unit has decided on them.

ONE rule set judges every unit and seam of the source and is the one the unit-safety inspection reads: the pack through the source view the caller must hold open (policy::runtime::with_project_source_view — inside it policy::runtime::active() is the pinned snapshot, and the view fails if pack or role changed by its end), the gateway rules through gateway, captured once here and passed into every admission.

Trait Implementations

impl Debug for RootedUnitSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.