v1

type Assessment struct {
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type BlockEvalResult struct {

	// status holds the PASS/FAIL/SOFTFAIL status label of the whole PolicySet evaluation
	Status string           `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	Id     string           `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
	Meta   *PolicyBlockMeta `protobuf:"bytes,3,opt,name=meta,proto3" json:"meta,omitempty"`
	// results from each of the policies in the set
	Results []*Result `protobuf:"bytes,4,rep,name=results,proto3" json:"results,omitempty"`
	// error captures an error that failed the evaluation at the PolicySet level
	Error *Error `protobuf:"bytes,5,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ChainLink struct {

	// Types that are valid to be assigned to Source:
	//
	//	*ChainLink_Predicate
	Source isChainLink_Source `protobuf_oneof:"source"`
	// contains filtered or unexported fields
}

type ChainLink_Predicate struct {
	Predicate *ChainedPredicate `protobuf:"bytes,1,opt,name=predicate,proto3,oneof"` // ChainedOutput output = 2;
}

type ChainProvider interface {
	GetChain() []*ChainLink
}

type ChainedOutput struct {
	Policy string `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	Tenet  string `protobuf:"bytes,2,opt,name=tenet,proto3" json:"tenet,omitempty"`
	// contains filtered or unexported fields
}

type ChainedPredicate struct {
	Type       string          `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	Selector   string          `protobuf:"bytes,2,opt,name=selector,proto3" json:"selector,omitempty"`
	Runtime    string          `protobuf:"bytes,3,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Identities []*v11.Identity `protobuf:"bytes,5,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type ChainedSubject struct {

	// source resource descriptor. The source provides evidence (attestations)
	// to compute a new resource descriptor (the destination) which becomes the
	// effective subject of the policy.
	Source *v1.ResourceDescriptor `protobuf:"bytes,1,opt,name=source,proto3" json:"source,omitempty"`
	// destination resource descriptor, computed from one of the source's attestations
	Destination *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=destination,proto3" json:"destination,omitempty"`
	// The link records how the source and destination are connected by keeping
	// track of the ingested attestation.
	Link *ChainedSubjectLink `protobuf:"bytes,3,opt,name=link,proto3" json:"link,omitempty"`
	// contains filtered or unexported fields
}

type ChainedSubjectLink struct {

	// Predicate type of the linker attestation
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// attestation coordinates
	Attestation *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=attestation,proto3" json:"attestation,omitempty"`
	// identities used to verify the attestation at ingestion time (if any)
	Identities []*v11.Identity `protobuf:"bytes,3,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type ChangeLog struct {

	// Changelog message
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// Recorded date of the change
	Date *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=date,proto3,oneof" json:"date,omitempty"`
	// Version number when the change was introduced
	Version *string `protobuf:"bytes,3,opt,name=version,proto3,oneof" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type CommonProvider interface {
	GetCommon() *PolicySetCommon
}

type ContextVal struct {

	// Data type of the context value. Enforced values are "string", "int", "bool", "float".
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// Required flag. If set to true, policies will not evaluate if the context value is not set.
	Required *bool `protobuf:"varint,2,opt,name=required,proto3,oneof" json:"required,omitempty"`
	// Value field. If the ContextVal is typed, the data should be castable to the type defined in Type.
	Value *structpb.Value `protobuf:"bytes,3,opt,name=value,proto3,oneof" json:"value,omitempty"`
	// Default value when ContextVal is not set. If the ContextVal is typed, the
	// default value should be castable into the type defined in type
	Default *structpb.Value `protobuf:"bytes,4,opt,name=default,proto3,oneof" json:"default,omitempty"`
	// Human readable description of the ContextValue
	Description *string `protobuf:"bytes,5,opt,name=description,proto3,oneof" json:"description,omitempty"`
	// Expression is an evaluator-language snippet resolved at evaluation time
	// to produce the context value dynamically (e.g. from the subject under
	// evaluation). It is mutually exclusive with both `value` and `default`,
	// since an expression is a burned-in computation with no static fallback.
	Expression *string `protobuf:"bytes,6,opt,name=expression,proto3,oneof" json:"expression,omitempty"`
	// Runtime selects the evaluator used to resolve `expression`. When empty,
	// the policy's default runtime is used.
	Runtime *string `protobuf:"bytes,7,opt,name=runtime,proto3,oneof" json:"runtime,omitempty"`
	// contains filtered or unexported fields
}

type Control struct {

	// Control ID string.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Human readable description of the control
	Title string `protobuf:"bytes,2,opt,name=title,proto3" json:"title,omitempty"`
	// Framework identifier string
	Framework string `protobuf:"bytes,3,opt,name=framework,proto3" json:"framework,omitempty"`
	// Control class/family within its framework
	Class string `protobuf:"bytes,4,opt,name=class,proto3" json:"class,omitempty"`
	// Subitem identifier of control checks
	Item string `protobuf:"bytes,5,opt,name=item,proto3" json:"item,omitempty"`
	// contains filtered or unexported fields
}

type Error struct {

	// Message contains the condition that failed to be met, causing the policy to fail.
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// Guidance is an optional text record that is surfaced to the user with
	// suggestions to make the policy evaluation pass.
	Guidance string `protobuf:"bytes,2,opt,name=guidance,proto3" json:"guidance,omitempty"`
	// contains filtered or unexported fields
}

type EvalResult struct {

	// id transferred from the tenet identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// status is holds the PASS/FAIL/SOFTFAIL status of the eval
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`
	// date when the evaluation was done
	Date *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date,proto3" json:"date,omitempty"`
	// output holds the data structure of the evaluated outputs
	Output *structpb.Struct `protobuf:"bytes,4,opt,name=output,proto3" json:"output,omitempty"`
	// statements imported as evidence to evaluate the tenet
	Statements []*StatementRef `protobuf:"bytes,5,rep,name=statements,proto3" json:"statements,omitempty"`
	// error struct when evaluation failed
	Error *Error `protobuf:"bytes,6,opt,name=error,proto3" json:"error,omitempty"`
	// assessment outcome when evaluation passed
	Assessment *Assessment `protobuf:"bytes,7,opt,name=assessment,proto3" json:"assessment,omitempty"`
	// contains filtered or unexported fields
}

type FrameworkRef struct {

	// String identifier for the framework
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Security framework name
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Link to the framework definition
	Definition *v1.ResourceDescriptor `protobuf:"bytes,3,opt,name=definition,proto3" json:"definition,omitempty"`
	// contains filtered or unexported fields
}

type Meta struct {

	// Runtime identifier. Defines the runtime and version. Eg cel/v0
	Runtime string `protobuf:"bytes,1,opt,name=runtime,proto3" json:"runtime,omitempty"`
	// Human readable description o the policy.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// AssertMode. Controls if one tenet or all must pass for the policy to pass.
	AssertMode string `protobuf:"bytes,3,opt,name=assert_mode,json=assertMode,proto3" json:"assert_mode,omitempty"`
	// Control references. Reference to framework controls the policy verifies.
	Controls []*Control `protobuf:"bytes,4,rep,name=controls,proto3" json:"controls,omitempty"`
	// Version is an integer marking the policy version. Optional.
	Version int64 `protobuf:"varint,5,opt,name=version,proto3" json:"version,omitempty"`
	// Enforce controls if a FAILED policy returns FAILED or SOFTFAIL. Values "Y"/"N"
	Enforce string `protobuf:"bytes,6,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Expiration date. Policies can expire as defined by this optional field.
	Expiration *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=expiration,proto3,oneof" json:"expiration,omitempty"`
	// Origin captures the origin of a policy when the compiler gathers its data.
	Origin *v1.ResourceDescriptor `protobuf:"bytes,8,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// Policy changelog
	Changelog []*ChangeLog `protobuf:"bytes,9,rep,name=changelog,proto3" json:"changelog,omitempty"`
	// contains filtered or unexported fields
}

type Output struct {
	Code  string          `protobuf:"bytes,1,opt,name=code,proto3" json:"code,omitempty"`
	Value *structpb.Value `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type Policy struct {
	Id           string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Source       *PolicyRef             `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	Meta         *Meta                  `protobuf:"bytes,3,opt,name=meta,proto3" json:"meta,omitempty"`
	Context      map[string]*ContextVal `` /* 141-byte string literal not displayed */
	Chain        []*ChainLink           `protobuf:"bytes,5,rep,name=chain,proto3" json:"chain,omitempty"`
	Identities   []*v11.Identity        `protobuf:"bytes,6,rep,name=identities,proto3" json:"identities,omitempty"`
	Predicates   *PredicateSpec         `protobuf:"bytes,7,opt,name=predicates,proto3" json:"predicates,omitempty"`
	Transformers []*Transformer         `protobuf:"bytes,8,rep,name=transformers,proto3" json:"transformers,omitempty"`
	Tenets       []*Tenet               `protobuf:"bytes,9,rep,name=tenets,proto3" json:"tenets,omitempty"`
	// contains filtered or unexported fields
}

type PolicyBlock struct {

	// ID string identifying the block
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Meta contains the metadata describing the
	Meta *PolicyBlockMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Policies is the list of policies grouped in the block
	Policies []*Policy `protobuf:"bytes,3,rep,name=policies,proto3" json:"policies,omitempty"`
	// contains filtered or unexported fields
}

type PolicyBlockMeta struct {

	// Description of the policy block
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// Assert mode to consider the policy block passing (OR or AND)
	AssertMode string `protobuf:"bytes,2,opt,name=assert_mode,json=assertMode,proto3" json:"assert_mode,omitempty"`
	// Enforce the block (ON or OFF)
	Enforce string `protobuf:"bytes,3,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Framework controls fronted by the block
	Controls []*Control `protobuf:"bytes,4,rep,name=controls,proto3" json:"controls,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroup struct {

	// Group identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Group metadata
	Meta *PolicyGroupMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Common groups the common data elements to be share by all the
	// policies in the group.
	Common *PolicySetCommon `protobuf:"bytes,3,opt,name=common,proto3" json:"common,omitempty"`
	// Group reference
	Source *PolicyGroupRef `protobuf:"bytes,4,opt,name=source,proto3" json:"source,omitempty"`
	// Policy blocks modeling the group begaviour.
	Blocks []*PolicyBlock `protobuf:"bytes,5,rep,name=blocks,proto3" json:"blocks,omitempty"`
	// Chain is the evidence chain to compute a set of subjects to which
	// PolicyGroup will apply.
	Chain []*ChainLink `protobuf:"bytes,6,rep,name=chain,proto3" json:"chain,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroupMeta struct {

	// Description of the policy block
	Description string `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	// Version of the group
	Version int64 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Control fronted by the policy group
	Controls []*Control `protobuf:"bytes,3,rep,name=controls,proto3" json:"controls,omitempty"`
	// Enforce the block (ON or OFF)
	Enforce string `protobuf:"bytes,4,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Expiration date of the policy group
	Expiration *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=expiration,proto3,oneof" json:"expiration,omitempty"`
	// Source of the group data when compiled from remote sources
	Origin *v1.ResourceDescriptor `protobuf:"bytes,6,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// Runtime engine identifier. Defaults to cel/v0 in AMPEL.
	Runtime string `protobuf:"bytes,7,opt,name=runtime,proto3" json:"runtime,omitempty"`
	// PolicyGroup changelog
	Changelog []*ChangeLog `protobuf:"bytes,8,rep,name=changelog,proto3" json:"changelog,omitempty"`
	// Assert mode to consider the policy group passing (OR or AND)
	AssertMode string `protobuf:"bytes,9,opt,name=assert_mode,json=assertMode,proto3" json:"assert_mode,omitempty"`
	// contains filtered or unexported fields
}

type PolicyGroupRef struct {

	// Group ID
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Pinned version of the group
	Version int64 `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	// Expected identity when the group file is signed
	Identity *v11.Identity `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	// Source location when referenced remotely
	Location *v1.ResourceDescriptor `protobuf:"bytes,4,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type PolicyRef struct {
	Id       string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Version  int64                  `protobuf:"varint,2,opt,name=version,proto3" json:"version,omitempty"`
	Identity *v11.Identity          `protobuf:"bytes,3,opt,name=identity,proto3" json:"identity,omitempty"`
	Location *v1.ResourceDescriptor `protobuf:"bytes,4,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type PolicySet struct {

	// ID is the policySet identifier
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Meta holds the PolicySet metadata information
	Meta *PolicySetMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// Common groups the common data elements to be share by all the
	// policies in the set.
	Common *PolicySetCommon `protobuf:"bytes,3,opt,name=common,proto3" json:"common,omitempty"`
	// Policies is the list of policies grouped in the PolicySet
	Policies []*Policy `protobuf:"bytes,4,rep,name=policies,proto3" json:"policies,omitempty"`
	// Chain is the evidence chain to compute a set of subjects to which
	// all the policies will apply.
	Chain []*ChainLink `protobuf:"bytes,5,rep,name=chain,proto3" json:"chain,omitempty"`
	// PolicyGroup definitions
	Groups []*PolicyGroup `protobuf:"bytes,6,rep,name=groups,proto3" json:"groups,omitempty"`
	// contains filtered or unexported fields
}

type PolicySetCommon struct {
	Identities []*v11.Identity        `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	References []*PolicyRef           `protobuf:"bytes,2,rep,name=references,proto3" json:"references,omitempty"`
	Context    map[string]*ContextVal `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

type PolicySetMeta struct {

	// Runtime to use as default for policies. Defines the runtime and version
	// to use when evaluating policy code. Defaults to cel/v0 in AMPEL.
	Runtime string `protobuf:"bytes,1,opt,name=runtime,proto3" json:"runtime,omitempty"`
	// Human description of the PolicySet
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Expiration date. When set, the policyset will fail if the expiration date
	// has passed.
	Expiration *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=expiration,proto3" json:"expiration,omitempty"`
	// Version of the PolicySet.
	Version int64 `protobuf:"varint,4,opt,name=version,proto3" json:"version,omitempty"`
	// Enforce marks if the policy engine returns FAIL or SOFTFAIL if policies
	// fail. Values "ON"/"OFF", defaults to "ON"
	Enforce string `protobuf:"bytes,5,opt,name=enforce,proto3" json:"enforce,omitempty"`
	// Framework references checked by this policy set. The references give
	// meaning to control references in the policies.
	Frameworks []*FrameworkRef `protobuf:"bytes,6,rep,name=frameworks,proto3" json:"frameworks,omitempty"`
	// Origin of the policyset's data, recorded when compiled.
	Origin *v1.ResourceDescriptor `protobuf:"bytes,7,opt,name=origin,proto3,oneof" json:"origin,omitempty"`
	// PolicySet changelog, records the changes in the policy code
	Changelog []*ChangeLog `protobuf:"bytes,8,rep,name=changelog,proto3" json:"changelog,omitempty"`
	// contains filtered or unexported fields
}

type PredicateSpec struct {
	Types []string `protobuf:"bytes,1,rep,name=types,proto3" json:"types,omitempty"`
	Limit int32    `protobuf:"varint,2,opt,name=limit,proto3" json:"limit,omitempty"`
	// contains filtered or unexported fields
}

type RemoteReference interface {
	GetId() string
	GetIdentity() *sapi.Identity
	GetLocation() *intoto.ResourceDescriptor
	GetSourceURL() string
	GetVersion() int64
	SetVersion(int64)
}

type Result struct {

	// status holds the PASS/FAIL/SOFTFAIL status label of the Policy evaluation
	Status string `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// Time when the policy evaluation started
	DateStart *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=date_start,json=dateStart,proto3" json:"date_start,omitempty"`
	// Time when the policy evaluation concluded
	DateEnd *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date_end,json=dateEnd,proto3" json:"date_end,omitempty"`
	// Reference to the policy code
	Policy *PolicyRef `protobuf:"bytes,4,opt,name=policy,proto3" json:"policy,omitempty"`
	// eval_results holds each of the tenet's evaluation results
	EvalResults []*EvalResult `protobuf:"bytes,5,rep,name=eval_results,json=evalResults,proto3" json:"eval_results,omitempty"`
	// meta from the original policy
	Meta *Meta `protobuf:"bytes,6,opt,name=meta,proto3" json:"meta,omitempty"`
	// context data loaded into the policy runtime
	Context *structpb.Struct `protobuf:"bytes,7,opt,name=context,proto3" json:"context,omitempty"`
	// chain holds the custody chain configuration when a policy uses chained subjects
	Chain []*ChainedSubject `protobuf:"bytes,8,rep,name=chain,proto3" json:"chain,omitempty"`
	// original subject under scrutiny. This may not be the effective subject if
	// the policy uses chained subjects.
	Subject *v1.ResourceDescriptor `protobuf:"bytes,9,opt,name=subject,proto3" json:"subject,omitempty"`
	// contains filtered or unexported fields
}

type ResultGroup struct {

	// status holds the PASS/FAIL/SOFTFAIL status label of the Policy evaluation
	Status string `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// Time when the policy evaluation started
	DateStart *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=date_start,json=dateStart,proto3" json:"date_start,omitempty"`
	// Time when the policy evaluation concluded
	DateEnd *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date_end,json=dateEnd,proto3" json:"date_end,omitempty"`
	// Reference to the policy code
	Group *PolicyGroupRef `protobuf:"bytes,4,opt,name=group,proto3" json:"group,omitempty"`
	// eval_results holds each of the tenet's evaluation results
	EvalResults []*BlockEvalResult `protobuf:"bytes,5,rep,name=eval_results,json=evalResults,proto3" json:"eval_results,omitempty"`
	// meta from the original policy
	Meta *PolicyGroupMeta `protobuf:"bytes,6,opt,name=meta,proto3" json:"meta,omitempty"`
	// context data loaded into the policy runtime
	Context *structpb.Struct `protobuf:"bytes,7,opt,name=context,proto3" json:"context,omitempty"`
	// chain holds the custody chain configuration when a policy uses chained subjects
	Chain []*ChainedSubject `protobuf:"bytes,8,rep,name=chain,proto3" json:"chain,omitempty"`
	// original subject under scrutiny. This may not be the effective subject if
	// the policy uses chained subjects.
	Subject *v1.ResourceDescriptor `protobuf:"bytes,9,opt,name=subject,proto3" json:"subject,omitempty"`
	// The ResultSet common struct varies from its policySet siblingas here,
	// the contextual information has the computed values, not the definitions.
	Common *ResultSetCommon `protobuf:"bytes,10,opt,name=common,proto3" json:"common,omitempty"`
	// Error contains the reason that caused the group evaluationto fail
	Error string `protobuf:"bytes,11,opt,name=Error,proto3" json:"Error,omitempty"`
	// contains filtered or unexported fields
}

type ResultSet struct {

	// Reference to the PolicySet that produced the ResultSet
	PolicySet *PolicyRef `protobuf:"bytes,1,opt,name=policy_set,json=policySet,proto3" json:"policy_set,omitempty"`
	// meta block transferred from the PolicySet
	Meta *PolicySetMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
	// status holds the PASS/FAIL/SOFTFAIL status label of the whole PolicySet evaluation
	Status string `protobuf:"bytes,3,opt,name=status,proto3" json:"status,omitempty"`
	// date_start time when the evaluation started
	DateStart *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=date_start,json=dateStart,proto3" json:"date_start,omitempty"`
	// date_end time when the evaluation finished
	DateEnd *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=date_end,json=dateEnd,proto3" json:"date_end,omitempty"`
	// subject under evaluation
	Subject *v1.ResourceDescriptor `protobuf:"bytes,6,opt,name=subject,proto3" json:"subject,omitempty"`
	// results from each of the policies in the set
	Results []*Result `protobuf:"bytes,7,rep,name=results,proto3" json:"results,omitempty"`
	// groups holds the results from policy groups
	Groups []*ResultGroup `protobuf:"bytes,8,rep,name=groups,proto3" json:"groups,omitempty"`
	// error captures an error that failed the evaluation at the PolicySet level
	Error *Error `protobuf:"bytes,9,opt,name=error,proto3" json:"error,omitempty"`
	// The ResultSet common struct varies from its policySet siblingas here,
	// the contextual information has the computed values, not the definitions.
	Common *ResultSetCommon `protobuf:"bytes,10,opt,name=common,proto3" json:"common,omitempty"`
	// contains filtered or unexported fields
}

type ResultSetCommon struct {

	// Context contains the computed common context values
	Context *structpb.Struct `protobuf:"bytes,9,opt,name=context,proto3" json:"context,omitempty"`
	// contains filtered or unexported fields
}

type Results interface {
	GetStatus() string
}

type StatementRef struct {

	// type holds the predicate type of the referenced attestation
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// attestation is a resource descriptor that records the attestation coordinates
	Attestation *v1.ResourceDescriptor `protobuf:"bytes,2,opt,name=attestation,proto3" json:"attestation,omitempty"`
	// identities captures the identities matched when verifying
	// the statement.
	Identities []*v11.Identity `protobuf:"bytes,3,rep,name=identities,proto3" json:"identities,omitempty"`
	// contains filtered or unexported fields
}

type Tenet struct {
	Id         string             `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Runtime    string             `protobuf:"bytes,2,opt,name=runtime,proto3" json:"runtime,omitempty"`
	Code       string             `protobuf:"bytes,3,opt,name=code,proto3" json:"code,omitempty"`
	Predicates *PredicateSpec     `protobuf:"bytes,4,opt,name=predicates,proto3" json:"predicates,omitempty"`
	Outputs    map[string]*Output `` /* 141-byte string literal not displayed */
	Error      *Error             `protobuf:"bytes,6,opt,name=error,proto3" json:"error,omitempty"`
	Title      string             `protobuf:"bytes,7,opt,name=title,proto3" json:"title,omitempty"`
	Assessment *Assessment        `protobuf:"bytes,8,opt,name=assessment,proto3" json:"assessment,omitempty"`
	// contains filtered or unexported fields
}

type Transformer struct {

	// Transformer identifier string, currently only internal:ID ids are recognized.
	// Optional @vM or @vM.m suffix selects a transformer version.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Configuration struct for the transformer, implementation specific
	Config *structpb.Struct `protobuf:"bytes,2,opt,name=config,proto3,oneof" json:"config,omitempty"`
	// contains filtered or unexported fields
}