Skip to content

Graphorin API reference v0.15.1


Graphorin API reference / @graphorin/security / dataflow

dataflow ​

Provenance / taint-based data-flow policy for @graphorin/security (toward CaMeL).

Enforces data-flow rules at a tool-execution boundary using the provenance Graphorin already tracks (trust class + source + sensitivity) rather than pattern scans alone, defusing the lethal trifecta. Pure and I/O-free; the enforcement point (the @graphorin/tools executor, via the agent runtime) threads a per-run TaintLedger through and acts on the DataFlowPolicy verdict.

References ​

ArgsTaintProbe ​

Re-exports ArgsTaintProbe


createDataFlowPolicy ​

Re-exports createDataFlowPolicy


createTaintLedger ​

Re-exports createTaintLedger


DataFlowDecision ​

Re-exports DataFlowDecision


DataFlowEvaluation ​

Re-exports DataFlowEvaluation


DataFlowFinding ​

Re-exports DataFlowFinding


DataFlowMode ​

Re-exports DataFlowMode


DataFlowPolicy ​

Re-exports DataFlowPolicy


DataFlowPolicyConfig ​

Re-exports DataFlowPolicyConfig


deriveTaintLabel ​

Re-exports deriveTaintLabel


isUntrustedTrustClass ​

Re-exports isUntrustedTrustClass


TaintFlowKind ​

Re-exports TaintFlowKind


TaintLabel ​

Re-exports TaintLabel


TaintLedger ​

Re-exports TaintLedger


TaintLedgerSnapshot ​

Re-exports TaintLedgerSnapshot