pub struct AnomalyConfig {
pub escalate_to_deny: bool,
pub read_intent_keywords: Vec<String>,
pub write_intent_keywords: Vec<String>,
pub admin_intent_keywords: Vec<String>,
pub suspicious_arg_patterns: Vec<String>,
}Expand description
Configuration for anomaly detection behavior.
Fields§
§escalate_to_deny: boolWhether anomalies should escalate to deny (hard block). If false, anomalies are logged and flagged but the request proceeds.
read_intent_keywords: Vec<String>Keywords that indicate a session’s declared intent is read-only. If the intent matches any of these (case-insensitive word boundary), then write/delete/admin operations are flagged as anomalies.
write_intent_keywords: Vec<String>Keywords that indicate a session’s declared intent includes writes. Write-intent sessions may perform read and write operations, but admin operations are flagged.
admin_intent_keywords: Vec<String>Keywords that indicate a session’s declared intent is administrative. Admin-intent sessions may perform any operation without anomaly flags.
suspicious_arg_patterns: Vec<String>Suspicious argument patterns that trigger anomaly detection in read sessions. Matched case-insensitively against the serialized JSON argument text.
Trait Implementations§
Source§impl Clone for AnomalyConfig
impl Clone for AnomalyConfig
Source§fn clone(&self) -> AnomalyConfig
fn clone(&self) -> AnomalyConfig
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more