Enum ThresholdMode 

#[non_exhaustive]
pub enum ThresholdMode {
    ZSigma {
        z_factor: f64,
    },
    Quantile {
        p: f64,
    },
}

Which statistic drives the adaptive threshold. Isolation-depth scores are right-skewed and heavy-tailed (not Gaussian), so the μ + z·σ form systematically over-flags during baseline calm periods and under-flags during drift. ThresholdMode::Quantile uses a streaming TDigest of the score distribution and thresholds on the chosen tail percentile — closer to the caller’s actual alert-rate budget (e.g. p = 0.99 ≈ 1 % firing rate).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

ZSigma

Classic mean + z · stddev on the EMA of the score stream. Back-compat default; keep this mode for Gaussian-like scores (lag-embedded streams with symmetric noise).

Fields

z_factor: f64

Multiplier on the EMA stddev.

Quantile

Streaming quantile threshold — threshold = TDigest.quantile(p) of observed scores. Robust to the isolation-depth right-skew; calibrates directly on the caller’s alert-rate budget. p must be in (0, 1); typical values are 0.99 / 0.999.

Fields

p: f64

Quantile used as the threshold. Higher p means a stricter threshold (fewer firings).

Trait Implementations

impl Clone for ThresholdMode

fn clone(&self) -> ThresholdMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ThresholdMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ThresholdMode

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ThresholdMode

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ThresholdMode

fn eq(&self, other: &ThresholdMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ThresholdMode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for ThresholdMode

impl StructuralPartialEq for ThresholdMode