Struct DeferredAuditQueue 

pub struct DeferredAuditQueue { /* private fields */ }

Producer-side handle. Cloneable so multiple callsites (HTTP handler, MCP handler, internal substrate writer) all share one queue.

Implementations

impl DeferredAuditQueue

pub fn new() -> (Self, UnboundedReceiver<DeferredAuditEvent>)

Create a fresh queue + uninstalled receiver. The receiver MUST be passed to spawn_drainer_task (or spawn_supervised_drainer) for events to land — submits against an unspawned receiver accumulate in the channel buffer indefinitely until the receiver is consumed or dropped.

pub fn submit(&self, event: DeferredAuditEvent) -> bool

Submit a refusal event. Non-blocking. Never panics — if the receiver is closed the metric counter is bumped and a tracing::warn is emitted, but the caller path is unaffected. Returns true when the event was queued, false when the receiver was already closed.

pub fn submit_refusal( &self, agent_id: &str, action: &AgentAction, decision: &Decision, ) -> bool

Convenience: build + submit a refusal from the three hook inputs. Returns true when an event was actually enqueued (i.e. the verdict was a refusal AND the receiver was open).

pub fn metrics(&self) -> DeferredAuditMetrics

Observability handle. Clone-cheap; safe to expose to readers (Prometheus scrape, MCP governance_state tool, etc.).

pub fn is_open(&self) -> bool

True when the drainer receiver is still attached. False when the supervisor task and its receiver have both terminated (shutdown complete).

Trait Implementations

impl Clone for DeferredAuditQueue

fn clone(&self) -> DeferredAuditQueue

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.