Enum ContentTrustLevel 

#[non_exhaustive]
#[repr(u8)]
pub enum ContentTrustLevel {
    Trusted = 0,
    LocalUntrusted = 1,
    ExternalUntrusted = 2,
}

Trust tier assigned to content entering the agent context.

Drives spotlighting intensity: Trusted content passes through unchanged; ExternalUntrusted receives the strongest warning header.

The tier is typically derived automatically from ContentSourceKind::default_trust_level, but can be overridden via ContentSource::with_trust_level when the call-site has more context about the actual origin of the content.

Examples

use zeph_sanitizer::{ContentTrustLevel, ContentSource, ContentSourceKind};

// Web scrapes default to the strongest warning level.
let source = ContentSource::new(ContentSourceKind::WebScrape);
assert_eq!(source.trust_level, ContentTrustLevel::ExternalUntrusted);

// Trust level can be overridden.
let elevated = source.with_trust_level(ContentTrustLevel::Trusted);
assert_eq!(elevated.trust_level, ContentTrustLevel::Trusted);

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Trusted = 0

System prompt, hardcoded instructions, direct user input. No wrapping applied.

LocalUntrusted = 1

Tool results from local executors (shell, file I/O). Lighter warning.

ExternalUntrusted = 2

External sources: web scrape, MCP, A2A, memory retrieval. Strongest warning.

Implementations

impl ContentTrustLevel

pub fn as_str(self) -> &'static str

Returns the snake_case identifier string for this trust level.

Used for SQLite/Qdrant persistence (issue #6490 write-time provenance tagging), mirroring ContentSourceKind::as_str.

Examples

use zeph_sanitizer::ContentTrustLevel;

assert_eq!(ContentTrustLevel::Trusted.as_str(), "trusted");
assert_eq!(ContentTrustLevel::ExternalUntrusted.as_str(), "external_untrusted");

pub fn from_str_opt(s: &str) -> Option<ContentTrustLevel>

Parse a &str into a ContentTrustLevel.

Returns None for unrecognized strings so callers can fall back to a conservative default and log a warning instead of failing deserialization.

Examples

use zeph_sanitizer::ContentTrustLevel;

assert_eq!(ContentTrustLevel::from_str_opt("local_untrusted"), Some(ContentTrustLevel::LocalUntrusted));
assert_eq!(ContentTrustLevel::from_str_opt("unknown"), None);

pub fn from_ordinal(ordinal: u8) -> ContentTrustLevel

Reconstruct from the u8 discriminant.

Used by turn-scoped trust-tier trackers (issue #6490) that store the tier as a bare u8 in a lock-free slot (AtomicU8/RwLock<u8>) for cheap ratcheting via fetch_max/max. Values ≥ 2 saturate to ExternalUntrusted (the most conservative tier) rather than panicking, so a slot value from a future added variant fails safe instead of undefined behavior.

Examples

use zeph_sanitizer::ContentTrustLevel;

assert_eq!(ContentTrustLevel::from_ordinal(0), ContentTrustLevel::Trusted);
assert_eq!(ContentTrustLevel::from_ordinal(2), ContentTrustLevel::ExternalUntrusted);
assert_eq!(ContentTrustLevel::from_ordinal(255), ContentTrustLevel::ExternalUntrusted);

Trait Implementations

impl Clone for ContentTrustLevel

fn clone(&self) -> ContentTrustLevel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ContentTrustLevel

impl Debug for ContentTrustLevel

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContentTrustLevel

fn deserialize<__D>( __deserializer: __D, ) -> Result<ContentTrustLevel, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ContentTrustLevel

impl Hash for ContentTrustLevel

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for ContentTrustLevel

fn cmp(&self, other: &ContentTrustLevel) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for ContentTrustLevel

fn eq(&self, other: &ContentTrustLevel) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for ContentTrustLevel

fn partial_cmp(&self, other: &ContentTrustLevel) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for ContentTrustLevel

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContentTrustLevel