Enum Isolation 

pub enum Isolation {
    Trusted,
    Untrusted,
}

How a filter is instantiated and isolated (ADR 000004 / 000011). Not a “trust score”: it selects the instance lifecycle, mirroring how Fastly/Spin model per-request vs reusable sandboxes. Who is trusted is decided elsewhere (OCI signing, ADR 000006); this only says which lifecycle a loaded filter gets.

Variants

Trusted

Own filters: a pool of reusable instances, init once per instance, checked out per request (ADR 000012). No per-request zeroization (same trust domain). Statelessness (Fork 4) is therefore honored by trust, not enforced: a trusted filter that stashes mutable state in its own linear memory silently carries it across requests on a reused instance — and, with a pool, which instance a request lands on becomes observable (§6.6 footgun). That is not a security boundary (same trust domain); periodic recycling (max_requests_per_instance) bounds the accumulation, but only Untrusted’s fresh-per-request memory enforces statelessness structurally (ADR 000011).

Untrusted

Third-party filters: fresh instance per request, memory fresh by construction.

Trait Implementations

impl Clone for Isolation

fn clone(&self) -> Isolation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Isolation

impl Debug for Isolation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Isolation

impl PartialEq for Isolation

fn eq(&self, other: &Isolation) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Isolation