Graphorin

Appearance

Graphorin API reference v0.7.0

Graphorin API reference / @graphorin/tools / / DataFlowVerdict

Type Alias: DataFlowVerdict ​

ts
type DataFlowVerdict = 
  | {
  action: "allow";
}
  | {
  action: "flag" | "declassify" | "block";
  flow: string;
  reason: string;
  sourceKinds: ReadonlyArray<string>;
};

Defined in: packages/tools/src/executor/types.ts:260

Verdict returned by DataFlowGuard.inspect. Mirrors @graphorin/security's DataFlowDecision; the agent maps one to the other so the executor takes no security dependency.

  • 'allow' - proceed silently.
  • 'flag' - shadow-mode detection: audit, then proceed.
  • 'declassify' - operator-authorized tainted flow: audit, then proceed.
  • 'block' - enforce-mode block: surface dataflow_policy_blocked.