Struct IpcSecurityPipeline 

pub struct IpcSecurityPipeline { /* private fields */ }

Assembled IPC security pipeline holding all control point instances.

Implementations

impl IpcSecurityPipeline

pub fn new(config: IpcSecurityConfig, audit_config: AuditConfig) -> Self

Creates a new pipeline from configuration.

Arguments

• config: IPC security configuration.
• audit_config: Root audit persistence configuration.

Returns

Returns an initialized IpcSecurityPipeline with all control points ready.

pub fn check( &mut self, method: &str, request_id: &str, raw_body_len: usize, peer_identity: &PeerIdentity, connection_id: &str, ) -> CheckOutcome

Runs pre-dispatch security checks.

Execution order (per contract): C6 → C5 → C2 → C4 → C3

C1 (socket owner) runs at bind time and is not in the per-request pipeline. C9 (allowlist) runs at extension points.

Arguments

• method: IPC method name.
• request_id: Request identifier (for C4 replay check and C8 cache).
• raw_body_len: Byte length of the raw request body (for C5).
• peer_identity: Extracted peer identity snapshot (for C2/C3).
• connection_id: Opaque connection identifier (for per-connection C6).

Returns

Returns CheckOutcome::Passed when all checks pass, or CheckOutcome::Denied(error) with the denial error. The caller must write audit records and execute the actual dispatch.

pub fn check_idempotency(&self, request_id: &str) -> Option<String>

Checks the idempotency cache for a cached response (C8).

Called after check() passes but before dispatch.

Arguments

• request_id: Request identifier.

Returns

Returns Some(cached_result_json) if a cached result exists, or None if no cache hit.

pub fn cache_result(&mut self, request_id: &str, response_json: &str)

Caches a dispatch result for idempotency (C8).

Arguments

• request_id: Request identifier.
• response_json: Serialized response to cache.

pub fn write_audit( &mut self, method: &str, peer_identity: &PeerIdentity, allowed: bool, denial_error: Option<&DashboardError>, denial_control_point: &str, ) -> Result<(), DashboardError>

Writes an audit record after dispatch (C7).

Returns Ok(()) on success or Err(DashboardError) when the audit backend is unwritable. The caller should fail closed for high-risk commands.

Arguments

• method: IPC method name.
• peer_identity: Peer identity snapshot.
• allowed: Whether the request was allowed.
• denial_error: The denial error if denied.
• denial_control_point: Which control point denied (C1-C9 or “dispatch”).

Returns

Returns Ok(()) when the audit record was written, or Err(DashboardError) when the backend is unwritable.