Struct SessionTaintTracker 

pub struct SessionTaintTracker { /* private fields */ }

Session-sticky taint tracker (§10.1, coarse P1). Cheap to clone; clones share state.

Implementations

impl SessionTaintTracker

pub fn new(config: ContentTrustConfig) -> Self

pub fn set_outbound_taint_declarer(&self, declarer: OutboundTaintDeclarer)

Wire the §10.1 outbound-taint declarer (bound to the mob handle at gateway bootstrap). Shared across clones.

pub fn set_event_sink(&self, sink: Arc<dyn MemoryEventSink>)

Wire the §9.3 timeline sink so taint transitions surface on the console alongside the tracing warns. Shared across clones.

pub fn observe_agent_event(&self, identity: &str, event: &AgentEvent)

Observe one agent event for identity (the observe-only agent-event stream is per-member, so attribution is the subscription’s).

pub fn note_current_session(&self, identity: &str, session_key: &str)

Authoritative current-session hint from the identity runtime’s delivery path. Keeps the tracker’s attribution ahead of the (async) observe stream on the paths MobKit controls.

pub fn clear_identity(&self, identity: &str)

Explicit clear for the reset path (reset() is the operator’s escape hatch from a poisoned session). Rotation already clears implicitly; this also drops any pending pre-attribution taint. The outgoing session’s fact is deliberately retained (P2): “that session was tainted” stays true after the identity moves on, and the comms join and the Distiller’s evidence gate consult it for exactly such sessions.

pub fn mark_reset_boundary(&self, session_key: &str)

Mark a reset() boundary on the outgoing session (§8.4): every LLM-authored write whose evidence cites this session quarantines pending steward review, regardless of content taint. Idempotent.

pub fn evidence_quarantine_reason(&self, session_key: &str) -> Option<String>

§10.1/§8.4 evidence gate query: why a write citing session_key as evidence must quarantine, if it must. Coarse by design: the tracker holds session-sticky facts, so a tainted session taints every evidence range within it.

pub fn session_taint(&self, session_key: &str) -> Option<TaintState>

Taint fact for an explicit session key.

pub fn identity_taint(&self, identity: &str) -> Option<TaintState>

Taint fact for the identity’s currently-attributed session (the write gate’s query: LLM-authored writes carry identity, not session).

Trait Implementations

impl Clone for SessionTaintTracker

fn clone(&self) -> SessionTaintTracker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for SessionTaintTracker

fn default() -> SessionTaintTracker

Returns the “default value” for a type.

impl MemberAgentEventSink for SessionTaintTracker

fn observe(&self, identity: &str, envelope: &EventEnvelope<AgentEvent>)