pub struct Coverage<'r, 'a> { /* private fields */ }Expand description
Qualified absence coverage with accounted original-source contributors. Complete reason coverage alone is not a whole certificate trust verdict; caller still owns current-source selection and authenticated path provenance.
Implementations§
Source§impl<'r, 'a> Coverage<'r, 'a>
impl<'r, 'a> Coverage<'r, 'a>
Sourcepub fn new<W: Work>(
first: AbsenceEvidence<'r, 'a>,
execution: &W,
) -> Result<Self>
pub fn new<W: Work>( first: AbsenceEvidence<'r, 'a>, execution: &W, ) -> Result<Self>
Retain the first qualified source; capacity remains charged until drop.
Sourcepub fn target(&self) -> &'r Certificate<'a>
pub fn target(&self) -> &'r Certificate<'a>
Original target shared by every contributing reason source.
§Panics
Only if the private nonempty source invariant is violated.
Sourcepub fn evaluated_at(&self) -> Reading
pub fn evaluated_at(&self) -> Reading
Exact evaluation label shared by every contributing reason source.
§Panics
Only if the private nonempty source invariant is violated.
Sourcepub fn sources(&self) -> &[AbsenceEvidence<'r, 'a>]
pub fn sources(&self) -> &[AbsenceEvidence<'r, 'a>]
Original evidence behind every contributing reason union.
§Panics
Only if the internal growth invariant is violated: each public return restores the owned source buffer before exposing this collection.
Sourcepub fn add<W: Work>(
&mut self,
evidence: AbsenceEvidence<'r, 'a>,
execution: &W,
) -> Result<CoverageAdmission>
pub fn add<W: Work>( &mut self, evidence: AbsenceEvidence<'r, 'a>, execution: &W, ) -> Result<CoverageAdmission>
Add compatible qualified coverage under the current operation account.
Growing coverage is request-scoped: execution must share its original
account. Later requests may inspect retained facts, but cannot grow this
collection using a different work domain. No old-account fallback.
§Panics
Only if the internal owned-buffer or checked-account transfer invariant is violated. Resource refusals restore the original collection.