pub struct EvidenceControlEntry {
pub control_id: String,
pub passed: bool,
pub framework_articles: HashMap<String, Vec<String>>,
pub details: Option<Value>,
pub schema: Option<String>,
}Expand description
One entry per control evaluated by the compliance collector.
passed is the control-level aggregate (every check in details
passed). framework_articles lists which framework articles the
control satisfies — used by the agent to emit one
ProbeSubResult per (framework, article) tuple downstream.
Fields§
§control_id: StringCapability-named control identifier (e.g. "access-control",
"secure-boot"). Matches the controlId parameter of
nixfleet-compliance/lib/mkTypedControl.nix.
passed: boolControl-level aggregate: true iff every probe check passed.
Failure on any check sets this to false; the agent
propagates this to every framework/article tuple the control
covers when emitting sub-results.
framework_articles: HashMap<String, Vec<String>>Framework → article-IDs the control satisfies. Empty map is valid (control covers no framework articles — synthetic always-fail control, smoke probe, etc.). The agent skips entries with an empty map for per-article accounting.
details: Option<Value>Free-form probe output for human display (compliance-check CLI, auditor reports). NOT consumed by the gate; preserved on the wire so a single signed file reproduces the operator- facing detail without re-running probes.
schema: Option<String>Typed-control schema hint (e.g. "anssi-bp028/v1"). Optional;
set only when the producer used the typed-control pipeline
(nixfleet-compliance/lib/mkTypedControl.nix). Auditor tools
use this to apply schema-specific decoders to details.
Trait Implementations§
Source§impl Clone for EvidenceControlEntry
impl Clone for EvidenceControlEntry
Source§fn clone(&self) -> EvidenceControlEntry
fn clone(&self) -> EvidenceControlEntry
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more