Struct AttributionCensus 

pub struct AttributionCensus { /* private fields */ }

Attribution census over every transaction row read.

Counted over all rows, not only the ones that verified, so a chain that breaks at row 5 still reports what the remaining rows claim about who acted. Those claims are only as good as the chain verdict beside them: unless it is Intact, treat every count here as unproven, and note that Self::rows can then exceed the verdict’s rows_checked. A row past the break may be perfectly authentic – a deleted or reordered row breaks the link while leaving every later signature valid – so the surplus is the part of the trail this command cannot vouch for, not proof of forgery. Self::rows exists so a reader can see that gap instead of inferring it.

One counter is not enough, because a row can name no account for reasons with different remedies. none:unattributed says the daemon tried and failed on a host that could have attributed the call, which is a configuration problem to chase in the daemon log. A v1 or v2 row says the encoding had no principal field when the row was signed, which is history and cannot be repaired: backfilling it would rewrite the bytes the signature covers. An unattested value says something wrote to the column that should not have.

Splitting them keeps the report honest on an upgraded database. A single “unattributed” count of 0 over a chain of pre-v3 rows reads as “every action is attributed” when in fact none of them is.

Fields are private and Self::of is the only constructor that reads rows, so a census cannot state totals that contradict the rows it describes. from_counts_for_tests is the one other way to build one, and it is not for production. That is not hypothetical tidiness: in 0.3.0 the MCP report built its own all-zero attribution count on the cannot_verify path, where a real count had already been computed, and the MCP tool and audit verify --json then published different numbers for one database.

Implementations

impl AttributionCensus

pub fn of(tx_rows: &[ChainRow]) -> Self

Count the rows. The only way to obtain a census of real data.

pub fn named(&self) -> u64

Rows whose signed principal names an account (uid: or token:).

Names an account, which is not a person: see SECURITY.md on shared logins, su, uid reuse, and on token:vsock proving possession of a file.

pub fn attribution_failed(&self) -> u64

Rows signing none:unattributed, the daemon’s admission that it could not name the caller.

pub fn not_recorded(&self) -> u64

Rows with no principal the signature covers, normally written before the column existed.

pub fn unattested(&self) -> u64

Rows carrying a principal no signature vouches for. Non-zero means investigate: nothing in SysKnife writes such a value.

pub fn rows(&self) -> u64

Rows censused.

The four row outcomes partition the rows, and Self::of increments exactly one bucket per row, so this equals their sum. State the partition rather than the arithmetic: a fifth bucket keeps the partition true, and any sum written out by hand somewhere else would not survive it.

pub fn unnamed(&self) -> u64

Rows that name no account, for any reason. What an operator asking “can this trail tell me who acted” has to subtract.

Subtraction rather than addition on purpose: a fifth non-naming bucket cannot make this number stale, whereas summing the reasons would need editing here too. A future bucket that does name an account would have to be added to named instead, which is why named is the one counter this subtracts.

Trait Implementations

impl Clone for AttributionCensus

fn clone(&self) -> AttributionCensus

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AttributionCensus

impl Debug for AttributionCensus

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AttributionCensus

impl PartialEq for AttributionCensus

fn eq(&self, other: &AttributionCensus) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AttributionCensus