Skip to content

Graphorin API reference v0.4.0


Graphorin API reference / @graphorin/tools / / DataFlowVerdict

Type Alias: DataFlowVerdict

ts
type DataFlowVerdict = 
  | {
  action: "allow";
}
  | {
  action: "flag" | "declassify" | "block";
  flow: string;
  reason: string;
  sourceKinds: ReadonlyArray<string>;
};

Defined in: packages/tools/src/executor/executor.ts:228

Verdict returned by DataFlowGuard.inspect. Mirrors @graphorin/security's DataFlowDecision; the agent maps one to the other so the executor takes no security dependency.

  • 'allow' — proceed silently.
  • 'flag' — shadow-mode detection: audit, then proceed.
  • 'declassify' — operator-authorized tainted flow: audit, then proceed.
  • 'block' — enforce-mode block: surface dataflow_policy_blocked.