Struct AuditExecContext 

pub struct AuditExecContext {

    pub contract_name: Option<String>,
    pub target: Option<String>,
    pub authority_profile: Option<String>,
    pub authority_namespace: Option<String>,
    pub trust_level: Option<AuthorityTrustLevel>,
    pub access_profile: Option<RbacProfile>,
    pub inherit: Option<AuthorityInheritMode>,
    pub deny_dangerous_env: Option<bool>,
    pub redact_output: Option<bool>,
    pub network: Option<AuthorityNetworkPolicy>,
    pub allowed_secrets: Vec<String>,
    pub required_secrets: Vec<String>,
    pub injected_secrets: Vec<String>,
    pub missing_required_secrets: Vec<String>,
    pub dropped_env_names: Vec<String>,
    pub env_mappings: Vec<AuditEnvMapping>,
    pub target_allowed: Option<bool>,
    pub target_decision: Option<AuthorityTargetDecision>,
    pub matched_target: Option<String>,
    pub deny_reason: Option<DenyReason>,
}

Execution-specific audit context for tsafe exec-style operations.

Fields

contract_name: Option<String>

target: Option<String>

authority_profile: Option<String>

authority_namespace: Option<String>

trust_level: Option<AuthorityTrustLevel>

access_profile: Option<RbacProfile>

inherit: Option<AuthorityInheritMode>

deny_dangerous_env: Option<bool>

redact_output: Option<bool>

network: Option<AuthorityNetworkPolicy>

allowed_secrets: Vec<String>

required_secrets: Vec<String>

injected_secrets: Vec<String>

missing_required_secrets: Vec<String>

dropped_env_names: Vec<String>

env_mappings: Vec<AuditEnvMapping>

Records each --env ENV_VAR=VAULT_KEY mapping so the audit trail shows which vault key was sourced for each renamed env var injection.

target_allowed: Option<bool>

target_decision: Option<AuthorityTargetDecision>

matched_target: Option<String>

deny_reason: Option<DenyReason>

Implementations

impl AuditExecContext

pub fn from_contract(contract: &AuthorityContract) -> Self

Seed an exec context from an authority contract without committing to a concrete target or the final injected/dropped sets yet.

pub fn with_target(self, target: impl Into<String>) -> Self

pub fn with_injected_secrets<I, S>(self, names: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

pub fn with_missing_required_secrets<I, S>(self, names: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

pub fn with_dropped_env_names<I, S>(self, names: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

pub fn with_target_allowed(self, allowed: bool) -> Self

pub fn with_target_evaluation( self, evaluation: &AuthorityTargetEvaluation, ) -> Self

Trait Implementations

impl Clone for AuditExecContext

fn clone(&self) -> AuditExecContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditExecContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditExecContext

fn default() -> AuditExecContext

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuditExecContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuditExecContext

fn eq(&self, other: &AuditExecContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuditExecContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuditExecContext

impl StructuralPartialEq for AuditExecContext