Enum FirewallError 

#[non_exhaustive]
pub enum FirewallError {
    Policy(PolicyError),
    Audit(AuditError),
    ReservedScopeKey,
    PreflightScanFailed {
        reason: String,
    },
}

Firewall 错误。

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Policy(PolicyError)

策略引擎错误。

Audit(AuditError)

审计写入错误。

ReservedScopeKey

I10c-β2 R3 NICE 修复:FirewallConfig.allowed_scopes 使用了保留键 "allowed_hosts",会在 evaluate 合并步骤覆盖 host allowlist —— 启动期 硬拒绝,避免误配置破坏 host 白名单语义。

PreflightScanFailed

ISS-010:T0 preflight 扫描(vigil_redaction::scan_text)返错。

语义:安全核心的 fail-closed 路径 —— preflight 是在规则决策之前运行的, 扫描失败意味着我们无法判断本次调用是否带 PII / Secret,必须视为最坏情况。caller 应把此错误翻译成业务层 Deny(不继续走 policy 评估,也不入 approvals 表)。

reason 由 ScanError::{InferenceFailed, ..} 的 Debug 形式派生,不含用户原文。

Fields

reason: String

来自 vigil_redaction::ScanError 的 Debug 投影(无用户原文)。

Trait Implementations

impl Debug for FirewallError

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for FirewallError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for FirewallError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<AuditError> for FirewallError

fn from(source: AuditError) -> FirewallError

Converts to this type from the input type.

impl From<PolicyError> for FirewallError

fn from(source: PolicyError) -> FirewallError

Converts to this type from the input type.