Enum SessionEvent 

pub enum SessionEvent {
    Miss,
    ComplianceMiss,
    ComplianceHit,
    EditConsulted,
    EditBlocked,
    FloorConsultMiss,
    PolicyConsultMiss,
    PolicyConsultHit,
    PolicySteered,
    CodexShellMiss,
    CodexShellBlocked,
    UnclassifiedPolicyLiteralBypass,
    Bootstrap,
    PromptNudge,
    WrappedDbClientMiss,
    TombstoneBypassedDeny,
}

Session analytics event types. Each maps to a daily aggregation key prefix.

Hit is NOT included — it has richer side effects and uses the separate ConsultationHit command.

Variants

Miss

ComplianceMiss

ComplianceHit

EditConsulted

Claude edit gate: an edit DEFERRED because a recent consultation receipt exists. Records AllowAfterReceipt with an edit-specific reason code, so the audit trail proves the edit (not just the read) was preceded by a consult (Plane 2 evidence).

EditBlocked

Claude edit gate: an edit was DENIED (stale or shell-evaded — no recent consult). Records Deny with an edit-specific reason code.

FloorConsultMiss

Enterprise floor mandate: an unconsulted access to a consult-required path was DENIED. Records Deny with reason floor_consult_required (distinct from gotcha denies).

PolicyConsultMiss

Local policy denied an unconsulted governed action.

PolicyConsultHit

Local policy allowed an action after its receipt was present.

PolicySteered

Local policy injected steering context without changing the decision.

CodexShellMiss

CodexShellBlocked

Codex PRE-hook (codex-pre-bash / codex-pre-apply-patch) BLOCKED an unconsulted access — the shell command or patch never ran. Records Deny, unlike SessionEvent::CodexShellMiss, which the POST-bash hook fires after the fact when nothing was denied.

UnclassifiedPolicyLiteralBypass

An unclassified command mentioned a meaningful literal from an active policy trigger; records a bypass signal without changing the decision.

Bootstrap

PromptNudge

WrappedDbClientMiss

Post-bash observed a command that passed is_schema_introspection but whose leading word did not classify as db_client — an upstream PreToolUse hook rewrote it (observed live: rtk psql …). The consultation receipt this command should mint never mints, so a db_client policy stays permanently unsatisfiable: a deadlock, not a bypass. Diagnostic only; does not change any decision.

TombstoneBypassedDeny

The FileDeleted tombstone bypass fired on a caller-confirmed deletion, suppressing a deny a qualifying confirmed gotcha would otherwise have produced. Records BypassDetected — the decision stayed Tombstone (allow), but the suppression is enforcement- relevant and must reach the hash-chained log.

Trait Implementations

impl Clone for SessionEvent

fn clone(&self) -> SessionEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionEvent

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SessionEvent

impl PartialEq for SessionEvent

fn eq(&self, other: &SessionEvent) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SessionEvent

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SessionEvent