Class QueryFinding
- Namespace
- QueryGuard
- Assembly
- QueryGuard.Core.dll
One piece of evidence produced by evaluating a completed session against a policy.
public sealed class QueryFinding- Inheritance
-
QueryFinding
- Inherited Members
Remarks
A finding is evidence, not a verdict on the application's design. It carries the numbers that justify it: occurrence counts, expected and actual values, timing, and a bounded SQL sample, so a reader can disagree with it on the facts.
A finding that is allowlisted is marked IsIgnored and keeps its IgnoreReason. It is never removed: an allowlist that quietly deletes findings becomes the place real problems go to die.
Constructors
- QueryFinding(QueryFindingKind, QueryGuardSeverity, string, string, QueryFingerprint?, long?, long?, IReadOnlyList<string>?, bool, string?, string?)
Initializes a new instance of the QueryFinding class.
Properties
- Actual
Gets the observed value, when the rule has one.
- Evidence
Gets supporting detail lines. Already redacted by the central privacy policy.
- Expected
Gets the configured limit, when the rule has one.
- Fingerprint
Gets the fingerprint this finding concerns, or null for session-wide findings such as a total-count budget breach.
- IgnoreReason
Gets the reason recorded on the matching allowlist entry, or null.
- IsFailure
Gets a value indicating whether this finding causes the containing result to fail.
- IsIgnored
Gets a value indicating whether an allowlist entry matched this finding.
- Kind
Gets what kind of evidence this finding reports.
- Message
Gets a self-contained, human-readable summary.
- RuleName
Gets the name of the policy rule that produced this finding.
- Severity
Gets how strongly QueryGuard reacts to this finding.
- StackTrace
Gets a filtered stack trace for the first occurrence, or null when capture is disabled.
Methods
- ToString()
Returns a string that represents the current object.