Skip to main content

ActionKind

Enum ActionKind 

Source
#[repr(u8)]
pub enum ActionKind {
Show 69 variants PartitionCreate = 1, PartitionDestroy = 2, PartitionSuspend = 3, PartitionResume = 4, PartitionSplit = 5, PartitionMerge = 6, PartitionHibernate = 7, PartitionReconstruct = 8, PartitionMigrate = 9, CapabilityGrant = 16, CapabilityRevoke = 17, CapabilityDelegate = 18, CapabilityEscalate = 19, CapabilityAttenuated = 20, RegionCreate = 32, RegionDestroy = 33, RegionTransfer = 34, RegionShare = 35, RegionUnshare = 36, RegionPromote = 37, RegionDemote = 38, RegionMap = 39, RegionUnmap = 40, CommEdgeCreate = 48, CommEdgeDestroy = 49, IpcSend = 50, IpcReceive = 51, ZeroCopyShare = 52, NotificationSignal = 53, DeviceLeaseGrant = 64, DeviceLeaseRevoke = 65, DeviceLeaseExpire = 66, DeviceLeaseRenew = 67, ProofVerifiedP1 = 80, ProofVerifiedP2 = 81, ProofVerifiedP3 = 82, ProofRejected = 83, ProofEscalated = 84, SchedulerEpoch = 96, SchedulerModeSwitch = 97, TaskSpawn = 98, TaskTerminate = 99, StructuralSplit = 100, StructuralMerge = 101, RecoveryEnter = 112, RecoveryExit = 113, CheckpointCreated = 114, CheckpointRestored = 115, MinCutBudgetExceeded = 116, DegradedModeEntered = 117, DegradedModeExited = 118, BootAttestation = 128, BootComplete = 129, TeeAttestation = 130, VectorPut = 144, VectorDelete = 145, GraphMutation = 146, CoherenceRecomputed = 147, VmidReclaim = 160, MigrationTimeout = 161, AnchorExternalReceipt = 176, ContextResolve = 192, ContextRead = 193, ContextSearch = 194, ContextPut = 195, ContextAliasUpdate = 196, ContextForget = 197, ContextExecute = 198, ContextEpochSeal = 199,
}
Expand description

Privileged actions that produce witness records (ADR-134, Section 2).

Organized by subsystem. Hex values allow easy filtering by prefix in audit queries (0x0_ = partition, 0x1_ = capability, 0x2_ = memory, etc.).

If a privileged action exists without a corresponding kind, the system has an audit gap.

Variants§

§

PartitionCreate = 1

A new partition was created.

§

PartitionDestroy = 2

A partition was destroyed and its resources freed.

§

PartitionSuspend = 3

A partition was suspended (tasks paused).

§

PartitionResume = 4

A suspended partition was resumed.

§

PartitionSplit = 5

A partition was split along a mincut boundary.

§

PartitionMerge = 6

Two partitions were merged into one.

§

PartitionHibernate = 7

A partition was hibernated to dormant/cold storage.

§

PartitionReconstruct = 8

A hibernated partition was reconstructed from its receipt.

§

PartitionMigrate = 9

A partition was migrated to another node.

§

CapabilityGrant = 16

A capability was granted (copied) to another partition.

§

CapabilityRevoke = 17

A capability was revoked.

§

CapabilityDelegate = 18

A capability was delegated (with depth decrement).

§

CapabilityEscalate = 19

Delegation depth was increased (escalation).

§

CapabilityAttenuated = 20

Capability was attenuated during a partition split (DC-8).

§

RegionCreate = 32

A memory region was created.

§

RegionDestroy = 33

A memory region was destroyed.

§

RegionTransfer = 34

A memory region was transferred to another partition.

§

RegionShare = 35

A memory region was shared (read-only) with another partition.

§

RegionUnshare = 36

A shared memory region was unshared.

§

RegionPromote = 37

A memory region was promoted to a warmer tier.

§

RegionDemote = 38

A memory region was demoted to a colder tier.

§

RegionMap = 39

A stage-2 mapping was added for a memory region.

§

RegionUnmap = 40

A stage-2 mapping was removed for a memory region.

§

CommEdgeCreate = 48

A communication edge was created between two partitions.

§

CommEdgeDestroy = 49

A communication edge was destroyed.

§

IpcSend = 50

An IPC message was sent.

§

IpcReceive = 51

An IPC message was received.

§

ZeroCopyShare = 52

A zero-copy memory share was established.

§

NotificationSignal = 53

A notification signal was sent.

§

DeviceLeaseGrant = 64

A device lease was granted.

§

DeviceLeaseRevoke = 65

A device lease was revoked.

§

DeviceLeaseExpire = 66

A device lease expired (time-bounded).

§

DeviceLeaseRenew = 67

A device lease was renewed.

§

ProofVerifiedP1 = 80

A P1 capability check passed.

§

ProofVerifiedP2 = 81

A P2 policy validation passed.

§

ProofVerifiedP3 = 82

A P3 deep proof passed.

§

ProofRejected = 83

A proof was rejected.

§

ProofEscalated = 84

A proof was escalated to a higher tier.

§

SchedulerEpoch = 96

Scheduler epoch boundary (bulk switch summary per DC-10).

§

SchedulerModeSwitch = 97

Scheduler mode switched (Reflex / Flow / Recovery).

§

TaskSpawn = 98

A task was spawned within a partition.

§

TaskTerminate = 99

A task was terminated.

§

StructuralSplit = 100

Scheduler triggered a structural split.

§

StructuralMerge = 101

Scheduler triggered a structural merge.

§

RecoveryEnter = 112

System entered recovery mode.

§

RecoveryExit = 113

System exited recovery mode.

§

CheckpointCreated = 114

A recovery checkpoint was created.

§

CheckpointRestored = 115

A recovery checkpoint was restored.

§

MinCutBudgetExceeded = 116

Mincut budget was exceeded, stale cut used (DC-2 fallback).

§

DegradedModeEntered = 117

System entered degraded mode (DC-6).

§

DegradedModeExited = 118

System exited degraded mode.

§

BootAttestation = 128

Boot attestation record (genesis witness).

§

BootComplete = 129

Boot sequence completed successfully.

§

TeeAttestation = 130

TEE-backed attestation record.

§

VectorPut = 144

A vector was inserted into the coherence graph.

§

VectorDelete = 145

A vector was deleted from the coherence graph.

§

GraphMutation = 146

A graph mutation occurred.

§

CoherenceRecomputed = 147

Coherence scores were recomputed.

§

VmidReclaim = 160

A physical VMID was reclaimed from a hibernated partition (DC-12).

§

MigrationTimeout = 161

Migration timed out and was aborted (DC-7).

§

AnchorExternalReceipt = 176

A commitment to an external, service-side record (e.g. a ruflo ADR-322C evaluation receipt) was anchored into the witness chain after independent verification (ADR-156).

Anchoring records provenance only: the anchored record keeps the assurance level it was produced under and does not acquire the witness chain’s guarantees (ADR-285 discipline).

§

ContextResolve = 192

A versionless ruv:// name was resolved to an immutable RVF revision.

§

ContextRead = 193

A progressive context representation was read.

§

ContextSearch = 194

An authorized context search enumerated candidate results.

§

ContextPut = 195

A new immutable context revision was registered.

§

ContextAliasUpdate = 196

A versionless alias was changed with compare-and-swap.

§

ContextForget = 197

A context alias was tombstoned and its payload became unreachable.

§

ContextExecute = 198

Execution of pinned context content was authorized.

§

ContextEpochSeal = 199

A cryptographic receipt sealed a context witness epoch.

Implementations§

Source§

impl ActionKind

Source

pub const fn subsystem(self) -> u8

Return the subsystem prefix for this action kind.

Useful for filtering audit queries by subsystem: 0 = partition, 1 = capability, 2 = memory, 3 = communication, 4 = device, 5 = proof, 6 = scheduler, 7 = recovery, 8 = boot, 9 = graph, 0xA = VMID management, 0xB = external anchoring, 0xC = governed context.

Trait Implementations§

Source§

impl Clone for ActionKind

Source§

fn clone(&self) -> ActionKind

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Copy for ActionKind

Source§

impl Debug for ActionKind

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Eq for ActionKind

Source§

impl Hash for ActionKind

Source§

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher. Read more
1.3.0 · Source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
Source§

impl PartialEq for ActionKind

Source§

fn eq(&self, other: &ActionKind) -> bool

Equality operator ==. Read more
1.0.0 (const: unstable) · Source§

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=. Read more
Source§

impl StructuralPartialEq for ActionKind

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.