Struct Authority 

pub struct Authority {
    pub grant: Grant,
    pub egress: Vec<String>,
    pub unscoped_net: bool,
    pub fs_read: Vec<String>,
    pub fs_write: Vec<String>,
    pub effects: Vec<String>,
    pub off_lattice: Vec<String>,
}

The authority a program requires, derived from its own types.

A function of the source alone: the same source derives the same Authority, and nothing in it comes from a policy file.

Fields

grant: Grant

The least grant in the trust lattice that permits every declared effect. Minimal by construction — see Authority::minimality_witness.

egress: Vec<String>

The minimal egress allowlist: every host a net("host") effect names, sorted.

unscoped_net: bool

A bare [net] is present somewhere, so the set of hosts reached is not bound at the type level. Tracked separately because losing host precision is a widening even when the coarse network level does not move.

fs_read: Vec<String>

Path scopes named by fs_read / fs_walk effects, sorted.

fs_write: Vec<String>

Path scopes named by fs_write effects, sorted.

effects: Vec<String>

Every declared effect kind, sorted — the lattice’s and the rest.

off_lattice: Vec<String>

Declared effects effect_requirement maps to no dimension, sorted. No grant refuses these.

Implementations

impl Authority

pub fn grant_id(&self) -> GrantId

Content address of the derived grant — a stable id for “this exact authority”, so an approval can be bound to it.

pub fn minimality_witness(&self, effects: &EffectSet) -> Vec<MinimalityWitness>

Evidence that the derived grant is tight: for every dimension above none, the next level down rejects at least one declared effect.

Computed rather than asserted, so a caller can print it and a test can check it. An empty vector means the grant is Grant::bottom — the program needs no authority at all, which is as tight as it gets.

Trait Implementations

impl Clone for Authority

fn clone(&self) -> Authority

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Authority

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Authority

impl PartialEq for Authority

fn eq(&self, other: &Authority) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Authority

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Authority