Struct StreamSecurityPolicy 

pub struct StreamSecurityPolicy {
    pub remote_limits: StreamRemoteLimits,
}

Security policy applied to stream payloads that leave the local boundary.

Combines the StreamRemoteLimits bounds with a redaction scan over expression graphs so private paths, host names, credentials, and oversized binaries do not escape in public payloads.

Fields

remote_limits: StreamRemoteLimits

Bounds applied to remote stream access.

Implementations

impl StreamSecurityPolicy

pub fn validate_public_expr(self, expr: &Expr) -> Result<()>

Rejects an expression destined for a public surface if it contains any redaction finding.

Returns an Error::Eval naming the offending finding category.

pub fn finding_for_expr(self, expr: &Expr) -> Option<StreamRedactionFinding>

Recursively scans an expression graph and returns the first redaction finding, or None if the expression is clean.

pub fn finding_for_text(self, value: &str) -> Option<StreamRedactionFinding>

Scans a single text value and returns the first redaction finding, or None if no sensitive pattern matches.

Trait Implementations

impl Clone for StreamSecurityPolicy

fn clone(&self) -> StreamSecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for StreamSecurityPolicy

impl Debug for StreamSecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StreamSecurityPolicy

fn default() -> StreamSecurityPolicy

Returns the “default value” for a type.

impl Eq for StreamSecurityPolicy

impl PartialEq for StreamSecurityPolicy

fn eq(&self, other: &StreamSecurityPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for StreamSecurityPolicy