Graphorin API reference v0.4.0
Graphorin API reference / @graphorin/security / dataflow
dataflow
Provenance / taint-based data-flow policy for @graphorin/security (P1-3, toward CaMeL).
Enforces data-flow rules at a tool-execution boundary using the provenance Graphorin already tracks (trust class + source + sensitivity) rather than pattern scans alone, defusing the lethal trifecta. Pure and I/O-free; the enforcement point (the @graphorin/tools executor, via the agent runtime) threads a per-run TaintLedger through and acts on the DataFlowPolicy verdict.
References
ArgsTaintProbe
Re-exports ArgsTaintProbe
createDataFlowPolicy
Re-exports createDataFlowPolicy
createTaintLedger
Re-exports createTaintLedger
DataFlowDecision
Re-exports DataFlowDecision
DataFlowEvaluation
Re-exports DataFlowEvaluation
DataFlowFinding
Re-exports DataFlowFinding
DataFlowMode
Re-exports DataFlowMode
DataFlowPolicy
Re-exports DataFlowPolicy
DataFlowPolicyConfig
Re-exports DataFlowPolicyConfig
deriveTaintLabel
Re-exports deriveTaintLabel
TaintFlowKind
Re-exports TaintFlowKind
TaintLabel
Re-exports TaintLabel
TaintLedger
Re-exports TaintLedger