Graphorin API reference / @graphorin/agent / / InboundTaintSeed

Interface: InboundTaintSeed

Defined in: packages/agent/src/types.ts:565

Stable

Message-borne untrusted input entering a run from a channel gateway. Stamped into the run's taint ledger at init, BEFORE the first step, so the data-flow policy's untrusted leg is armed even though the input arrives as a user MESSAGE rather than a tool output (the Rule-of-Two deliberately excludes ordinary user messages; channel peers are authenticated but their CONTENT is attacker-influenceable). Widen-only: it can add taint, never clear it.

Properties

Property	Modifier	Type	Description	Defined in
`sensitive?`	`readonly`	`boolean`	Also arm the sensitive leg (rare; widen-only).	packages/agent/src/types.ts:577
`sourceKind?`	`readonly`	`string`	Descriptive source kind for audit trails, e.g. `'channel:telegram'`. Default `'channel-inbound'`.	packages/agent/src/types.ts:575
`text`	`readonly`	`string`	The untrusted inbound text. Recorded as verbatim spans so a later sink call whose args copy the channel text trips the probe.	packages/agent/src/types.ts:570

Interface: InboundTaintSeed ​

Properties ​

Interface: InboundTaintSeed

Properties