Struct SensitivitySpec 

pub struct SensitivitySpec { /* private fields */ }

Declares which document field values observability may capture.

Drives value-suppression so observability never leaks tenant values (NFR-S2). The model is deny-by-default (opt-out): every field is treated as sensitive unless explicitly allow-listed as safe. A field added to your documents tomorrow is protected automatically, you opt specific, known-safe fields out of redaction rather than remembering to opt every risky one in.

Use SensitivitySpec::allowing to name the shape-only, non-tenant fields that are safe to capture; SensitivitySpec::all_sensitive (the default) redacts everything; SensitivitySpec::nothing_sensitive is the explicit opt-out for data that carries no tenant values at all (e.g. test fixtures).

Implementations

impl SensitivitySpec

pub fn all_sensitive() -> Self

Deny by default: every field’s value is sensitive. The safe default.

pub fn allowing(safe: Vec<FieldName>) -> Self

Deny by default, except the safe fields (known shape-only / non-tenant values) which observability may capture.

pub fn nothing_sensitive() -> Self

Treat nothing as sensitive. An explicit opt-out for data that carries no tenant values (e.g. test fixtures); never appropriate for tenant payloads.

pub fn none() -> Self

Alias for SensitivitySpec::nothing_sensitive.

pub fn is_sensitive(&self, field: &FieldName) -> bool

Whether field’s value is sensitive (deny-by-default: sensitive unless explicitly allow-listed as safe).

Trait Implementations

impl Clone for SensitivitySpec

fn clone(&self) -> SensitivitySpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SensitivitySpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SensitivitySpec

fn default() -> Self

Returns the “default value” for a type.

impl Eq for SensitivitySpec

impl PartialEq for SensitivitySpec

fn eq(&self, other: &SensitivitySpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SensitivitySpec