cadrumo.core.classification package¶
Sensitivity classification primitives for persisted state.
Every persisted record (SQL row, file-backed envelope, blob, secret-store
entry, audit-log entry) declares a SensitivityClass. Each class maps to
a default ClassificationPolicy resolved by default_policy_for();
the policy pins the at-rest treatment (plaintext or ciphertext-required),
retention behaviour, and the redaction rule references that the audit sink and
run-trace path honour.
The default policy table is the single point of truth. Per-domain
repositories MAY override the default for an individual record (e.g.
when an operator tags a corpus blob as identity-bearing), but the
default is always available via default_policy_for(). Redaction
rule references stored as names are resolved to live
RedactionRule instances by core.redaction.