Struct BaselineFinding 

pub struct BaselineFinding {
    pub fingerprint: String,
    pub rule_id: String,
    pub severity: Severity,
    pub first_seen_at: DateTime<Utc>,
    pub reason_waived: Option<String>,
    pub severity_override: Option<Severity>,
    pub expires_at: Option<DateTime<Utc>>,
}

One entry in a baseline. Keyed on fingerprint (16-hex SHA-256 truncation computed by compute_fingerprint).

Two waiver shapes:

• Plain pre-existing finding. reason_waived, severity_override, expires_at all None. The finding existed at init time; it is reported as “pre-existing” rather than a regression. Critical findings in this shape STILL fail exit-1.
• Explicit waiver. reason_waived populated. If the original severity was Critical, severity_override: "critical" and expires_at <= accepted_at + 90d are mandatory; otherwise the waiver is rejected at load time and the critical falls through to exit 1.

Fields

fingerprint: String

16-hex SHA-256 fingerprint matching the SARIF/JSON/CloudEvents value.

rule_id: String

Snake-case rule id (custom rule id if present, else FindingCategory snake_case form).

severity: Severity

Severity captured at init time. Used for the critical-bypass check.

first_seen_at: DateTime<Utc>

When this entry was first added to the baseline (init or accept).

reason_waived: Option<String>

Free-form justification. Required on accept (>=10 chars). None when the entry was bulk-added by init.

severity_override: Option<Severity>

Acknowledges that the original severity was Critical and the waiver is intentional. Council’s hard rule: any critical bypass must declare itself with this field; missing == critical falls through to exit 1.

expires_at: Option<DateTime<Utc>>

Hard deadline. Mandatory for severity_override: critical. After this timestamp the waiver is treated as expired (logs a warning and the underlying finding counts toward exit-1 again).

Implementations

impl BaselineFinding

pub fn is_valid_critical_waiver(&self, now: DateTime<Utc>) -> bool

True iff this entry waives a critical via the explicit-override shape (severity_override + reason + expires_at <= 90d).

pub fn is_expired(&self, now: DateTime<Utc>) -> bool

True iff this waiver carries an expires_at that has already passed.

Trait Implementations

impl Clone for BaselineFinding

fn clone(&self) -> BaselineFinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BaselineFinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for BaselineFinding

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for BaselineFinding

fn eq(&self, other: &BaselineFinding) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for BaselineFinding

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for BaselineFinding

impl StructuralPartialEq for BaselineFinding