Expand description
Secret-safe evidence for container diagnostics.
Raw URLs, header values, command arguments, environment values, and command
output never implement Serialize. The public evidence types below retain
only deliberately bounded metadata or values sanitized at construction.
Structs§
- Redacted
Command - Command evidence that records a typed executable and purpose plus only the number of discarded raw arguments.
- Redacted
Header - Header evidence that can record presence but never the raw value.
- Redacted
Origin - An endpoint or mirror origin with only scheme, host, and explicit port.
Unlike
RedactedUrl, it never exposes whether a path or query existed. - Redacted
Url - A URL whose credentials, path, query, and fragment cannot reach output.
- Redacted
Value - A marker whose serialized representation is always the redaction sentinel.
Enums§
- Command
Purpose - Typed purpose of a native command. No raw argument is needed to explain the operation in a report.
- Header
Name - Header names useful in diagnostics. Unknown names are collapsed rather than copied from untrusted input.
- Native
Program - A fixed set of executable identities used by native-container adapters.
- Redacted
UrlError