Skip to content

Graphorin API reference v0.7.0


Graphorin API reference / @graphorin/security / / TaintLedgerSnapshot

Interface: TaintLedgerSnapshot

Defined in: packages/security/src/dataflow/types.ts:160

Serializable coarse summary of a TaintLedger - the trifecta-gate flags only. Round-trips through createTaintLedger({ initial }). Carries no untrusted text content, so it is safe to persist in a RunState.

Stable

Properties

PropertyModifierTypeDescriptionDefined in
sensitiveSeenreadonlyboolean-packages/security/src/dataflow/types.ts:162
spanTileHashes?readonlyreadonly string[]C6: one-way FNV-1a hashes of non-overlapping normalized-text tiles of the tracked untrusted spans (stride = the probe window). Lets a resumed run re-arm the verbatim probe for content ingested BEFORE the suspend without persisting any untrusted text (hashes only). A rehydrated probe detects copies of at least 2*window-1 normalized chars; live spans recorded after the resume keep full stride-1 sensitivity.packages/security/src/dataflow/types.ts:173
untrustedSeenreadonlyboolean-packages/security/src/dataflow/types.ts:161
untrustedSourceKindsreadonlyreadonly string[]-packages/security/src/dataflow/types.ts:163