Hold every verdict write to a reviewed list of user actions

FR-CULL-13 says evidence never writes a rating, flag, label or trash
membership, and nothing enforced it. tools/traceability/src/verdicts.rs
parses the shipped code with syn and enumerates every write: calls to
the catalog setters and trash recorders, SQL that assigns those columns,
sidecar Amendment::Judgement, and fields named rating/flag/label. Each
site must be in ALLOWED with a reason, as Input (inside a Slint on_*
closure, checked structurally), Relay (its callers are checked in
turn), Carried (a verdict made elsewhere: sidecar and XMP pulls, sync
merge, catalog mirrored to file, duplicates consolidation) or
NotAVerdict. Unlisted sites and stale entries both fail
`cargo test -p traceability`; `traces verdicts` prints the list.

syn and proc-macro2 were already in the lockfile as proc-macro
dependencies; this adds the edges, no new crate and no version change.

This commit is contained in:

dtourolle

2026-09-27 07:20:38 -04:00

parent 6e68f1fb3d

commit 2cde287440

6 changed files with 1894 additions and 0 deletions

Cargo.lock

Generated

View File

@@ -7112,9 +7112,11 @@ name = "traceability"
 version = "0.18.1"
 dependencies = [
  "anyhow",
  "proc-macro2",
  "pulldown-cmark",
  "serde",
  "serde_json",
  "syn 2.0.119",
 ]
 [[package]]