Skip to main content

TaintLlmWriteGate

Struct TaintLlmWriteGate 

Source
pub struct TaintLlmWriteGate { /* private fields */ }
Expand description

The taint/posture gate: llm_writes = "quarantined" forces every first-pass LLM-authored write (Agent, Distiller, and the steward’s own consolidate/harvest/rank output) into quarantine regardless of taint; agent-authored writes quarantine when the author’s session is tainted; and ANY LLM-authored write (Steward and Distiller included) quarantines when its evidence cites a tainted session or a reset boundary (§8.4/§10.1 — coarse: session-tainted ⇒ range-tainted).

Review-verdict batches (StagedBatchKind::ReviewVerdict) are exempt from the posture branch only: a review verdict IS the review the posture defers to (§10.1 “quarantined until steward/operator review”) — quarantine releases, gating-approved promotions, and proposal accepts commit as review verdicts, and re-quarantining them would make review unable to ever produce an Active record under the conservative posture. The exemption is keyed on the batch’s semantic kind, NOT on the Steward author: all dream groups carry MemoryAuthor::Steward, but fresh steward LLM output (consolidate creates, harvest copies, rank batches) is first-pass content and respects the posture knob. The evidence-taint branch still applies to every batch, so a consolidation citing a tainted session quarantines like any other write.

Implementations§

Trait Implementations§

Source§

impl LlmWriteGate for TaintLlmWriteGate

Source§

fn quarantine_reason( &self, author: &MemoryAuthor, kind: StagedBatchKind, evidence: &[EvidenceRef], ) -> Option<String>

Some(reason) when this LLM-authored write must land RecordStatus::Quarantined. Non-LLM principals are never gated. kind is the batch’s semantic kind (§10.1): review verdicts are the review the quarantine posture defers to, fresh writes are not. evidence is the union of EvidenceRefs the write cites (P2 evidence-range taint, §10.1); empty for writes that cite nothing.

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<A, B, T> HttpServerConnExec<A, B> for T
where B: Body,

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

impl<T> Pointable for T

Source§

const ALIGN: usize

The alignment of pointer.
Source§

type Init = T

The type for initializers.
Source§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
Source§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
Source§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
Source§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more