Struct CompiledMasking 

pub struct CompiledMasking { /* private fields */ }

Snapshot-compiled form of a Masking policy (DW-029): every pointer parsed once at snapshot-compile time. The effective pointer set is resolved per request (the floor plus the authenticated consumer’s groups — the union rule), which is why groups stay a map here rather than being flattened at compile time.

Implementations

impl CompiledMasking

pub fn compile(cfg: &Masking) -> CompiledMasking

Compile a (validated) masking policy. Validation guarantees every pointer parses, so compilation drops nothing on any publishable config (the same unreachable-skip contract as CompiledJsonTransform::compile).

pub fn max_bytes(&self) -> u64

The buffering cap (bytes).

pub fn apply( &self, doc: &mut Value, consumer_groups: &[String], ) -> Result<usize, JsonTransformError>

Mask doc in place for a consumer in consumer_groups: every pointer in the floor plus every listed group the consumer belongs to is replaced with MASKED_VALUE. Returns how many DISTINCT pointers were applied (the audit count; a pointer listed in the floor and in one or more groups applies once). Fails on the first pointer that does not resolve — the strictness rule the DW-028 transform argues for, mandatory in the redaction direction: a silent miss is the leak.

Trait Implementations

impl Clone for CompiledMasking

fn clone(&self) -> CompiledMasking

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CompiledMasking

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CompiledMasking

fn eq(&self, other: &CompiledMasking) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CompiledMasking