Struct EnforcementEvent 

pub struct EnforcementEvent {

    pub event_id: String,
    pub schema_version: u8,
    pub seq_no: u64,
    pub recorded_at_ms: u64,
    pub event_type: EnforcementEventType,
    pub event_hash: String,
    pub prev_hash: String,
    pub installation_id: String,
    pub actor_local: Option<ActorLocal>,
    pub agent_type: String,
    pub subject_kind: SubjectKind,
    pub subject_key: String,
    pub canonical_subject_hash: Option<String>,
    pub receipt_id: Option<String>,
    pub decision_reason_code: String,
    pub decision_basis_hash: Option<String>,
    pub agent_session: Option<String>,
}

The canonical enforcement event envelope.

Every enforcement decision (deny, allow-after-receipt, bypass detection, control changes) is recorded as one of these events. They form a hash-chained, sequenced stream for tamper-evident audit.

Fields

event_id: String

Globally unique event identifier. UUIDv7 (time-ordered).

schema_version: u8

Schema version. Always SCHEMA_VERSION for v1.

seq_no: u64

Global durable monotonic sequence number within this store. Allocated atomically. Never reused. Never gaps except after crash (which produces a RecordingGap event on recovery).

recorded_at_ms: u64

Unix milliseconds UTC when this event was recorded.

event_type: EnforcementEventType

The type of event. Determines which optional fields are populated.

event_hash: String

SHA-256 hash of this event’s canonical serialization (see hash contract). Computed AFTER all other fields are set, stored as lowercase hex.

prev_hash: String

SHA-256 hash of the previous event in the stream. Empty string for the first event in the store. Forms a hash chain for tamper detection.

installation_id: String

Stable installation identifier. UUID generated once at first init, persisted in the store, never changes. NOT derived from hostname.

actor_local: Option<ActorLocal>

Local OS identity of the actor. Structured, explicitly labeled as unverified. None if identity cannot be determined.

agent_type: String

The AI agent type that triggered this event.

subject_kind: SubjectKind

What kind of subject this event pertains to.

subject_key: String

Canonical identifier of the subject. For files: the canonical file key (normalized, symlink-resolved, case-folded where applicable). For controls: the gotcha or config key.

canonical_subject_hash: Option<String>

Hash of the canonical file path for file-backed subjects. Allows cross-referencing even if paths are later renamed.

receipt_id: Option<String>

Links events back to the receipt that authorized them.

decision_reason_code: String

Stable enum string for the reason. NOT freeform prose. Examples: “gotcha_above_threshold”, “receipt_valid”, “receipt_expired”, “daemon_unreachable”, “control_created”, “control_deleted”

decision_basis_hash: Option<String>

Hash of the gotcha/config state that was used to make this decision. Proves which rule text and thresholds were in force at decision time.

agent_session: Option<String>

The AI agent SESSION that triggered this event (Claude Code session_id). Enables per-actor audit attribution — proving the same session that consulted a file also acted on it. None for events with no session (Codex, config changes, gaps). Added in schema_version 2; hashed only for v2+ events (see compute_hash).

Implementations

impl EnforcementEvent

pub fn compute_hash(&self) -> String

Compute the canonical hash of this event.

The hash covers all fields EXCEPT event_hash itself. This function is frozen for schema_version 1 — do not modify without incrementing SCHEMA_VERSION.

Trait Implementations

impl Clone for EnforcementEvent

fn clone(&self) -> EnforcementEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnforcementEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EnforcementEvent

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EnforcementEvent

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.