Skip to main content

Decision

Struct Decision 

Source
pub struct Decision {
    pub verdict: Verdict,
    pub rules: Vec<String>,
    pub reasons: Vec<String>,
    pub context: Vec<String>,
    pub notice: Option<Box<Notice>>,
}
Expand description

A verdict with the rule ids and human-readable reasons that produced it.

rules/reasons describe only the matches that carry the final verdict. Matches with a weaker verdict (e.g. an allow on git status inside a command that was denied for touching ~/.ssh) are kept in context so the user still sees the full picture without the headline being noisy.

Fields§

§verdict: Verdict

The strictest verdict across the matched rules.

§rules: Vec<String>

Ids of the rule groups that produced verdict, in evaluation order, de-duplicated.

§reasons: Vec<String>

One line per rule in rules.

§context: Vec<String>

Matches that did not determine the verdict (weaker outcomes), for display/audit.

§notice: Option<Box<Notice>>

How the agent and its person are told about a deny or review (ADR-059), when the rule or OpenMoat’s own check that decided it has a title. Presentation only: the engine never sets it, no decision reads it, and it is never serialised, so JSON output and the audit log stay as they were.

Implementations§

Source§

impl Decision

Source

pub fn new(verdict: Verdict) -> Self

A decision with no rules yet.

Source

pub fn single(verdict: Verdict, rule: &str, reason: impl Into<String>) -> Self

A decision produced by one rule for one reason.

Trait Implementations§

Source§

impl Clone for Decision

Source§

fn clone(&self) -> Self

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for Decision

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<'de> Deserialize<'de> for Decision

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl Eq for Decision

Source§

impl PartialEq for Decision

Source§

fn eq(&self, other: &Self) -> bool

Equality operator ==. Read more
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=. Read more
Source§

impl Serialize for Decision

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl StructuralPartialEq for Decision

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = !

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, !>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.