Struct Level 

pub struct Level {
    pub name: String,
    pub allow: Vec<Clause>,
    pub deny: Vec<Clause>,
}

A safety level: a name, its allow clauses (disjunction), and its deny clauses (allow-only subtractive corners, §4.1).

Fields

name: String

allow: Vec<Clause>

deny: Vec<Clause>

Implementations

impl Level

pub fn new(name: impl Into<String>) -> Self

An empty level (admits only the empty profile). Build it up with Level::allowing / Level::denying.

pub fn allowing(self, clause: Clause) -> Self

Add an allow clause (widens the admissible region).

pub fn denying(self, clause: Clause) -> Self

Add a deny clause (subtracts a corner; never grants).

pub fn nearest_miss(&self, cap: &Capability) -> Option<FacetMismatch>

Whether a single capability is admissible: some allow clause admits it and no deny clause matches it. Why this level does not admit cap, or None if it does.

A level is a DISJUNCTION of allow clauses, so a rejected capability failed all of them and there is a choice of which complaint to report. Clauses are usually split by operation (editor allows observes under one clause and mutates under another), so the first clause’s gripe is frequently “operation = mutate, allowed: [observe]” — true, useless, and it hides the facet the author actually needs to change. Preferring a clause whose OPERATION already matches surfaces the real blocker.

pub fn admits_capability(&self, cap: &Capability) -> bool

pub fn admits(&self, profile: &Profile) -> bool

Whether a whole profile passes: every capability is admissible. The empty profile passes vacuously.

pub fn extend( base: &Level, name: impl Into<String>, extra_allow: Vec<Clause>, ) -> Level

Author a level by extending base (R27: extends only loosens). The result inherits base’s allow and deny clauses unchanged and adds only allow clauses — it cannot drop an allow or add a deny, so extends ⇒ superset holds by construction. yolo’s subtractive deny is authored directly, never via extend.

Trait Implementations

impl Clone for Level

fn clone(&self) -> Level

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Level

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Level

fn default() -> Level

Returns the “default value” for a type.

impl Eq for Level

impl PartialEq for Level

fn eq(&self, other: &Level) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Level