Struct DeferredAuditEvent 

pub struct DeferredAuditEvent {
    pub agent_id: String,
    pub action: AgentAction,
    pub decision: Decision,
    pub timestamp: DateTime<Utc>,
}

One refusal captured by the storage hook, awaiting flush to the signed_events chain.

All fields are owned (no borrows) so the event can cross the mpsc channel boundary without lifetime gymnastics. payload_bytes is the canonical-JSON encoding of {action, decision} — the same shape the audited path commits to via agent_action::emit_check_event. The drainer hashes this on the way to signed_events.payload_hash.

Fields

agent_id: String

Agent identity at the moment of refusal (resolved from request or process context). Lands in signed_events.agent_id.

action: AgentAction

The action that was refused. Cloned from the hook input.

decision: Decision

The verdict — must be a Refuse variant; non-refusal events do not enter the queue (the submit helpers gate on Decision::is_refusal).

timestamp: DateTime<Utc>

Wall-clock timestamp of refusal. Lands in signed_events.timestamp as RFC3339.

Implementations

impl DeferredAuditEvent

pub fn from_refusal( agent_id: &str, action: &AgentAction, decision: &Decision, ) -> Option<Self>

Build a deferred event from the hook’s three inputs. Returns None when decision is not a refusal — callers should only submit refusals to the queue (Allow / Warn paths do not chain-log a refusal row).

pub fn rule_id(&self) -> Option<&str>

Extract the rule_id from the refusal verdict. Used by the drainer to surface the firing rule in the audit row’s canonical payload.

pub fn reason(&self) -> Option<&str>

Extract the refusal reason from the verdict (verbatim operator-authored string).

pub fn canonical_bytes(&self) -> Result<Vec<u8>>

Canonical JSON shape the drainer hashes for signed_events.payload_hash. Stable across versions: a flat object with action, decision, agent_id, timestamp keys — same outline as agent_action::emit_check_event plus the agent + timestamp.

Errors

Returns an error only if serde_json cannot serialize the action variant (in practice never happens for the canonical AgentAction shapes).

Trait Implementations

impl Clone for DeferredAuditEvent

fn clone(&self) -> DeferredAuditEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DeferredAuditEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.