infrastructure-dlp

DLP core: the host-agnostic wire envelope for masked findings (idempotency keyed on tenant/device/event, never content), capture-mode policy, raw-capture leak-prevention types, and the pure land-path assembly (masked audit payload + notification body). Depends on infrastructure-dlp-detect; carries the pieces every DLP sensor host shares regardless of which OS adapters it wires.

What it is for

infrastructure-dlp — host-agnostic DLP core shared by every sensor host.

Sits above infrastructure_dlp_detect (the pure detector) and below whichever crate wires the OS-specific keyboard/clipboard/PTY adapters. It owns the parts that are identical regardless of that choice:

• capture — CaptureMode policy and the RawCapture leak-prevention

type (R5/R6): raw bytes that cannot be serialized, cloned, or Debug-printed, and are zeroized on drop.

• envelope — the masked-finding wire DlpFindingEnvelope whose

idempotency key is (tenant, device, event) — never content-derived (R4).

• land — pure assembly of the masked audit payload + notification body

from an envelope (the decidable half of the audit/notify land-path; the actual record_scoped/notification calls are wired by the consuming module).

Capabilities

CaptureMode

Capture-mode policy and the raw-capture leak-prevention type (T8, R5/R6).

RawCapture

Capture-mode policy and the raw-capture leak-prevention type (T8, R5/R6).

DlpFindingEnvelope

The masked-finding wire envelope (T6, R4).

EnvFinding

The masked-finding wire envelope (T6, R4).

Source

The masked-finding wire envelope (T6, R4).

land (other)

Pure land-path assembly (T3): envelope → masked audit payload + notification

How to use it

No examples/ target and no doctest in this crate's rustdoc. The tests listed under Verification are the closest executable usage.

Module structure

infrastructure_dlp

• capture
• envelope
• land

flowchart TD
  n_infrastructure_dlp["infrastructure_dlp"]
  n_infrastructure_dlp --> n_capture["capture"]
  n_infrastructure_dlp --> n_envelope["envelope"]
  n_infrastructure_dlp --> n_land["land"]

Public surface

`capture`

`envelope`

`land`

Re-exports. Exported here, defined elsewhere.

Boundary

Depends on no other workspace tier.

Shares tier infrastructure with 82 other crates: infrastructure-acquire, infrastructure-adapters-google-calendar, infrastructure-adapters-google-gmail, infrastructure-adapters-google-places, infrastructure-adapters-google-trends, infrastructure-adapters-shodan, infrastructure-adapters-yelp, infrastructure-agent, … (82 total).

_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._

Where it sits

Dependencies

Runtime, in this workspace.

Runtime, from outside the workspace.

Development. None.

Build. None.

Depended on by. 4 workspace crates.

Signal flow — what reaches this crate, and what it reaches.

flowchart LR
  n_application_dlp["application-dlp"] -->|uses| SELF
  n_operations_dlp_agent["operations-dlp-agent"] -->|uses| SELF
  n_operations_dlp_sensor["operations-dlp-sensor"] -->|uses| SELF
  n_platform_privacy_scan_api["platform-privacy-scan-api"] -->|uses| SELF
  SELF["infrastructure-dlp"]
  SELF -->|runtime| n_infrastructure_dlp_detect["infrastructure-dlp-detect"]
  classDef self fill:#1f883d,stroke:#1f883d,color:#fff;
  class SELF self;

Feature flags

No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.

Targets

Error model

No public error type was detected: no public item declares a type named *Error, and no public signature returns one.

Operational characteristics

No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.

Configuration

No environment variable is read with a literal name anywhere in this crate. A variable whose key is computed at run time cannot be listed here, and is not claimed to be absent.

Related capabilities

4 workspace crates depend on this one: application-dlp, operations-dlp-agent, operations-dlp-sensor, platform-privacy-scan-api.

Verification

Evidence by module. How often each public module is named by something executable.

What the tests establish, by name:

• capture_mode_defaults_to_masked_only — src/capture.rs
• capture_mode_serde_snake_case — src/capture.rs
• raw_debug_is_redacted_never_leaks_contents — src/capture.rs
• raw_expose_is_the_only_reader — src/capture.rs
• ai_prompt_source_label_and_serde — src/envelope.rs
• distinct_events_have_distinct_keys — src/envelope.rs
• envelope_serde_round_trips — src/envelope.rs
• idempotency_key_is_tenant_device_event_not_content — src/envelope.rs
• action_constant_is_dlp_detected — src/land.rs
• audit_payload_is_masked_and_keyed — src/land.rs
• notification_body_is_masked_snippet_only — src/land.rs

Documentation coverage

pie showData
    title Public items with rustdoc
    "Documented" : 14
    "No rustdoc detected" : 2

Metrics

pie showData
    title Public API by kind
    "constant" : 1
    "enum" : 2
    "function" : 2
    "method" : 8
    "struct" : 3

pie showData
    title Rust source composition
    "Code" : 255
    "Blank or comment" : 129

Generation

Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.