Struct TrustGuard 

pub struct TrustGuard { /* private fields */ }

Guard that wraps a config file modification to preserve trust.

Snapshots the file’s trust status before the write. After the write, call TrustGuard::commit to update the trust hash — but only if the pre-write content was verified as trusted. This prevents a TOCTOU attack where a malicious actor modifies the file between the last trust check and rippy’s write.

For newly created files (no prior content), use TrustGuard::for_new_file.

Implementations

impl TrustGuard

pub fn before_write(path: &Path) -> Self

Snapshot the trust state of an existing config file before modifying it.

Reads the file, checks trust status. If the file doesn’t exist yet (will be created by the write), was_trusted is false.

pub fn for_new_file(path: &Path) -> Self

Create a guard for a file that is being newly created by the user.

commit() will unconditionally trust the new file since the user explicitly created it (e.g., rippy init).

pub fn commit(self)

Update the trust hash after the write, if the pre-write state was trusted.

If the file was not trusted before the write (tampered or never approved), this is a no-op and a warning is logged.

Errors are logged to stderr but do not fail the caller.