From e4b08f90064103293a5d7172d4e5e13609fef253 Mon Sep 17 00:00:00 2001
From: Eric Eastwood <erice@element.io>
Date: Wed, 25 Mar 2026 13:12:04 -0500
Subject: [PATCH] Explain `code` being splatted

See https://github.com/element-hq/matrix-authentication-service/pull/5553#discussion_r2984636426
---
 crates/policy/src/model.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/crates/policy/src/model.rs b/crates/policy/src/model.rs
index 8ba780297..a3bf24b5f 100644
--- a/crates/policy/src/model.rs
+++ b/crates/policy/src/model.rs
@@ -82,6 +82,10 @@ pub struct Violation {
     pub redirect_uri: Option<String>,
     pub field: Option<String>,
 
+    // We flatten as policies expect `code` as another top-level field.
+    //
+    // This also means all of the extra fields from the variant will be splatted at this
+    // level which is fine (arbitrary).
     #[serde(flatten)]
     pub variant: Option<ViolationVariant>,
 }