pub trait Control: Send + Sync {
// Required methods
fn id(&self) -> ControlId;
fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>;
// Provided methods
fn description(&self) -> &'static str { ... }
fn tsc_criteria(&self) -> &'static [&'static str] { ... }
fn remediation_hint(&self) -> Option<&'static str> { ... }
}Expand description
A verifiable SDLC control that produces findings from evidence.
Required Methods§
Sourcefn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>
fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>
Evaluates the evidence bundle and returns one finding per subject.
Provided Methods§
Sourcefn description(&self) -> &'static str
fn description(&self) -> &'static str
Human-readable description for SARIF rule output.
Sourcefn tsc_criteria(&self) -> &'static [&'static str]
fn tsc_criteria(&self) -> &'static [&'static str]
SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.
Sourcefn remediation_hint(&self) -> Option<&'static str>
fn remediation_hint(&self) -> Option<&'static str>
Actionable remediation hint shown when the control fails or needs review.