Struct ExtensionTrustTracker 

pub struct ExtensionTrustTracker { /* private fields */ }

Mutable trust lifecycle tracker for a single extension.

This struct manages the trust state machine and produces audit events for every transition.

Implementations

impl ExtensionTrustTracker

pub fn new(extension_id: &str, initial_state: ExtensionTrustState) -> Self

Create a new tracker with the given initial state.

pub fn from_risk_report(report: &InstallTimeRiskReport) -> Self

Create a tracker with initial state derived from an install-time risk report.

pub const fn state(&self) -> ExtensionTrustState

Current trust state.

pub fn extension_id(&self) -> &str

Extension identifier.

pub fn history(&self) -> &[TrustTransitionEvent]

Full transition history.

pub fn promote( &mut self, reason: &str, operator_ack: bool, risk_score: Option<u8>, recommendation: Option<InstallRecommendation>, ) -> Result<&TrustTransitionEvent, TrustTransitionError>

Attempt to promote the extension to the next trust level.

Promotions must follow the strict path: Quarantined → Restricted → Trusted.

Skipping levels (e.g., Quarantined → Trusted) is not allowed.

Errors

Returns TrustTransitionError if:

• operator_ack is false (promotions require explicit acknowledgment)
• The extension is already Trusted
• The risk score exceeds the threshold for the target state

pub fn demote( &mut self, reason: &str, ) -> Result<&TrustTransitionEvent, TrustTransitionError>

Demote the extension back to quarantine.

Demotions are always allowed and do not require operator acknowledgment. They are immediate and unconditional.

Errors

Returns TrustTransitionError::InvalidTransition if the extension is already quarantined.

pub fn history_jsonl(&self) -> Result<String, Error>

Export the full transition history as JSONL.

Errors

Returns an error if serialization fails.

Trait Implementations

impl Clone for ExtensionTrustTracker

fn clone(&self) -> ExtensionTrustTracker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExtensionTrustTracker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.