List of all items

Structs

• agent_assertions::EpisodeGraph
• agentic::AgenticCtx
• agentic::SuggestedAction
• agentic::SuggestedPatch
• baseline::Baseline
• baseline::BaselineDiff
• baseline::BaselineEntry
• baseline::GitInfo
• baseline::Improvement
• baseline::Regression
• baseline::report::HygieneReport
• baseline::report::MetricStats
• baseline::report::ReportWindow
• baseline::report::TestHygiene
• baseline::report::TestOutcomeRates
• baseline::report::TopReason
• cache::vcr::VcrCache
• calibration::model::CalibrationReport
• calibration::model::MetricKey
• calibration::model::MetricSummary
• calibration::stats::Aggregator
• config::path_resolver::PathResolver
• coverage::CoverageAnalyzer
• coverage::CoverageReport
• coverage::HighRiskGap
• coverage::PolicyViolation
• coverage::PolicyWarning
• coverage::RuleCoverage
• coverage::ToolCoverage
• coverage::TraceRecord
• discovery::types::DiscoveredServer
• discovery::types::HostInfo
• discovery::types::Inventory
• discovery::types::InventorySummary
• discovery::types::RunningProcessServer
• doctor::DoctorOptions
• doctor::model::BaselineSummary
• doctor::model::CacheSummary
• doctor::model::ConfigSummary
• doctor::model::DbSummary
• doctor::model::DoctorInputs
• doctor::model::DoctorReport
• doctor::model::PlatformInfo
• doctor::model::SuggestedAction
• doctor::model::TraceCoverage
• doctor::model::TraceSummary
• engine::runner::RunPolicy
• engine::runner::Runner
• errors::ConfigError
• errors::diagnostic::Diagnostic
• errors::similarity::ClosestMatch
• explain::ExplainedStep
• explain::RuleEvaluation
• explain::ToolCall
• explain::TraceExplainer
• explain::TraceExplanation
• fingerprint::Context
• fingerprint::Fingerprint
• incident::IncidentBuilder
• incident::IncidentBundle
• incident::IncidentMetadata
• judge::JudgeRuntimeConfig
• judge::JudgeService
• kill_switch::KillReport
• kill_switch::KillRequest
• mcp::audit::AuditEvent
• mcp::audit::AuditLog
• mcp::decision::DecisionData
• mcp::decision::DecisionEmitterGuard
• mcp::decision::DecisionEvent
• mcp::decision::FileDecisionEmitter
• mcp::decision::NullDecisionEmitter
• mcp::identity::ToolIdentity
• mcp::jsonrpc::CallToolParams
• mcp::jsonrpc::JsonRpcRequest
• mcp::jsonrpc::JsonRpcResponse
• mcp::jsonrpc::ToolCallResult
• mcp::jsonrpc::ToolResultBody
• mcp::lifecycle::FileLifecycleEmitter
• mcp::lifecycle::LifecycleEvent
• mcp::lifecycle::NullLifecycleEmitter
• mcp::policy::ConstraintParam
• mcp::policy::ConstraintRule
• mcp::policy::EnforcementSettings
• mcp::policy::GlobalLimits
• mcp::policy::McpPolicy
• mcp::policy::PolicyState
• mcp::policy::SignaturePolicy
• mcp::policy::ToolPolicy
• mcp::proxy::McpProxy
• mcp::proxy::ProxyConfig
• mcp::proxy::ProxyConfigRaw
• mcp::runtime_features::CgroupConfig
• mcp::runtime_features::DiscoveryActions
• mcp::runtime_features::DiscoveryConfig
• mcp::runtime_features::KillSwitchConfig
• mcp::runtime_features::KillTrigger
• mcp::runtime_features::MonitorMatch
• mcp::runtime_features::MonitorRule
• mcp::runtime_features::MonitorScopeConfig
• mcp::runtime_features::RuntimeMonitorConfig
• mcp::signing::ToolSignature
• mcp::signing::VerifyResult
• mcp::tool_call_handler::ToolCallHandler
• mcp::tool_call_handler::ToolCallHandlerConfig
• mcp::trust_policy::LoadedKey
• mcp::trust_policy::TrustPolicy
• mcp::trust_policy::TrustedKey
• mcp::types::McpEvent
• mcp::types::McpToolDef
• metrics_api::MetricResult
• model::AttemptRow
• model::EvalConfig
• model::JudgeConfig
• model::LlmResponse
• model::Policy
• model::Settings
• model::TestCase
• model::TestInput
• model::TestResultRow
• model::ThresholdingConfig
• model::ThresholdingSettings
• model::ToolCallRecord
• model::ToolsPolicy
• otel::OTelConfig
• policy_engine::Verdict
• providers::embedder::fake::FakeEmbedder
• providers::embedder::openai::OpenAIEmbedder
• providers::llm::fake::FakeClient
• providers::llm::openai::OpenAIClient
• providers::strict::StrictEmbedder
• providers::strict::StrictLlmClient
• providers::trace::TraceClient
• quarantine::QuarantineService
• redaction::RedactionPolicy
• report::RunArtifacts
• runtime::Authorizer
• runtime::AuthzConfig
• runtime::AuthzReceipt
• runtime::ConsumeParams
• runtime::MandateData
• runtime::MandateMetadata
• runtime::MandateStore
• runtime::ToolCallData
• storage::judge_cache::JudgeCache
• storage::rows::EpisodeRow
• storage::rows::StepRow
• storage::rows::ToolCallRow
• storage::store::Store
• storage::store::StoreStats
• thresholds::ThresholdConfig
• trace::ingest::IngestStats
• trace::otel_ingest::OtelSpan
• trace::schema::EpisodeEnd
• trace::schema::EpisodeStart
• trace::schema::StepEntry
• trace::schema::ToolCallEntry
• trace::schema::TraceEntryV1
• trace::schema::TruncationMeta
• trace::upgrader::StreamUpgrader
• validate::ValidateOptions
• validate::ValidateReport

Enums

• agent_assertions::model::TraceAssertion
• agentic::JsonPatchOp
• agentic::RiskLevel
• attempts::FailureClass
• discovery::types::AuthStatus
• discovery::types::DiscoverySource
• discovery::types::PolicyStatus
• discovery::types::ServerStatus
• discovery::types::Transport
• explain::StepVerdict
• kill_switch::KillMode
• mcp::decision::Decision
• mcp::jsonrpc::ContentItem
• mcp::policy::PolicyDecision
• mcp::policy::UnconstrainedMode
• mcp::runtime_features::ActionLevel
• mcp::runtime_features::DiscoveryMethod
• mcp::runtime_features::KillMode
• mcp::runtime_features::KillScope
• mcp::runtime_features::MonitorAction
• mcp::runtime_features::MonitorMode
• mcp::runtime_features::MonitorProvider
• mcp::runtime_features::MonitorRuleType
• mcp::runtime_features::Severity
• mcp::signing::SignatureAlgorithm
• mcp::signing::VerifyError
• mcp::tool_call_handler::HandleResult
• mcp::types::McpInputFormat
• mcp::types::McpPayload
• model::Expected
• model::SequenceRule
• model::TestStatus
• on_error::ErrorPolicy
• on_error::ErrorPolicyResult
• policy_engine::VerdictStatus
• quarantine::QuarantineMode
• runtime::AuthorizeError
• runtime::AuthzError
• runtime::MandateKind
• runtime::OperationClass
• runtime::PolicyError
• trace::schema::TraceEntry
• trace::schema::TraceEvent

Traits

• mcp::decision::DecisionEmitter
• mcp::lifecycle::LifecycleEmitter
• metrics_api::Metric
• providers::embedder::Embedder
• providers::llm::LlmClient

Functions

• agent_assertions::matchers::evaluate
• agent_assertions::verify_assertions
• agentic::build_suggestions
• attempts::classify_attempts
• baseline::compute_config_fingerprint
• baseline::report::report_from_db
• cache::key::cache_key
• calibration::from_db
• calibration::from_run
• calibration::stats::ingest_row
• config::load_config
• config::resolve::resolve_policies
• config::write_sample_config
• discovery::config_files::scan_config_files
• discovery::processes::scan_processes
• doctor::analyzers::config::analyze_config_integrity
• doctor::analyzers::policy::analyze_policy_usage
• doctor::analyzers::trace::analyze_trace_schema
• doctor::doctor
• embeddings::util::cosine_similarity
• embeddings::util::cosine_similarity_f64
• embeddings::util::decode_vec_f32
• embeddings::util::embed_cache_key
• embeddings::util::encode_vec_f32
• embeddings::util::sha256_hex
• errors::similarity::closest_prompt
• errors::try_map_error
• fingerprint::compute
• fingerprint::sha256_hex
• fix::apply_ops_in_place
• fix::apply_ops_to_file
• fix::apply_ops_to_text
• kill_switch::capture::capture_state
• kill_switch::incident::write_incident_bundle_post_kill
• kill_switch::incident::write_incident_bundle_pre_kill
• kill_switch::kill_pid
• kill_switch::killer::kill_pid
• kill_switch::parse_target_to_pid
• mcp::jcs::to_string
• mcp::jcs::to_vec
• mcp::lifecycle::mandate_revoked_event
• mcp::lifecycle::mandate_used_event
• mcp::mapper_v2::mcp_events_to_v2_trace
• mcp::parser::parse_mcp_transcript
• mcp::policy::make_deny_response
• mcp::signing::compute_key_id
• mcp::signing::compute_key_id_from_verifying_key
• mcp::signing::extract_signature
• mcp::signing::is_signed
• mcp::signing::sign_tool
• mcp::signing::verify_tool
• mcp::trust_policy::load_private_key_pem
• mcp::trust_policy::load_public_key_pem
• on_error::log_fail_safe
• otel::export_jsonl
• policy_engine::evaluate_schema
• policy_engine::evaluate_sequence
• policy_engine::evaluate_tool_args
• report::console::print_summary
• report::json::write_json
• report::junit::write_junit
• report::sarif::build_sarif_diagnostics
• report::sarif::write_sarif
• report::sarif::write_sarif_diagnostics
• runtime::compute_use_id
• trace::ingest::ingest_file
• trace::ingest::ingest_into_store
• trace::otel_ingest::convert_spans_to_episodes
• trace::otel_ingest::json_best_effort_opt
• trace::otel_ingest::json_best_effort_str
• trace::otel_ingest::json_best_effort_value
• trace::precompute::precompute_embeddings
• trace::precompute::precompute_judge
• trace::truncation::compute_sha256
• trace::truncation::compute_sha256_str
• trace::truncation::truncate_string
• trace::truncation::truncate_value_with_provenance
• trace::verify::verify_coverage
• validate::validate

Constants

• config::SUPPORTED_CONFIG_VERSION
• errors::diagnostic::codes::E_BASE_MISMATCH
• errors::diagnostic::codes::E_CFG_PARSE
• errors::diagnostic::codes::E_CFG_SCHEMA
• errors::diagnostic::codes::E_EMB_DIMS
• errors::diagnostic::codes::E_PATH_NOT_FOUND
• errors::diagnostic::codes::E_REPLAY_STRICT_MISSING
• errors::diagnostic::codes::E_TRACE_INVALID
• errors::diagnostic::codes::E_TRACE_MISS
• errors::diagnostic::codes::W_BASE_FINGERPRINT
• errors::diagnostic::codes::W_CACHE_CONFUSION
• mcp::decision::reason_codes::M_ALREADY_USED
• mcp::decision::reason_codes::M_AUDIENCE_MISMATCH
• mcp::decision::reason_codes::M_EXPIRED
• mcp::decision::reason_codes::M_ISSUER_NOT_TRUSTED
• mcp::decision::reason_codes::M_KIND_MISMATCH
• mcp::decision::reason_codes::M_MAX_USES_EXCEEDED
• mcp::decision::reason_codes::M_NONCE_REPLAY
• mcp::decision::reason_codes::M_NOT_FOUND
• mcp::decision::reason_codes::M_NOT_YET_VALID
• mcp::decision::reason_codes::M_REVOKED
• mcp::decision::reason_codes::M_TOOL_NOT_IN_SCOPE
• mcp::decision::reason_codes::M_TRANSACTION_REF_MISMATCH
• mcp::decision::reason_codes::P_ARG_SCHEMA
• mcp::decision::reason_codes::P_MANDATE_REQUIRED
• mcp::decision::reason_codes::P_MANDATE_VALID
• mcp::decision::reason_codes::P_POLICY_DENY
• mcp::decision::reason_codes::P_RATE_LIMIT
• mcp::decision::reason_codes::P_TOOL_DENIED
• mcp::decision::reason_codes::P_TOOL_DRIFT
• mcp::decision::reason_codes::P_TOOL_NOT_ALLOWED
• mcp::decision::reason_codes::S_DB_ERROR
• mcp::decision::reason_codes::S_INTERNAL_ERROR
• mcp::decision::reason_codes::T_EXEC_ERROR
• mcp::decision::reason_codes::T_TIMEOUT
• mcp::jsonrpc::error_codes::INTERNAL_ERROR
• mcp::jsonrpc::error_codes::INVALID_PARAMS
• mcp::jsonrpc::error_codes::INVALID_REQUEST
• mcp::jsonrpc::error_codes::METHOD_NOT_FOUND
• mcp::jsonrpc::error_codes::PARSE_ERROR
• mcp::lifecycle::EVENT_TYPE_REVOKED
• mcp::lifecycle::EVENT_TYPE_USED
• mcp::signing::PAYLOAD_TYPE_TOOL_V1
• mcp::signing::SIG_FIELD
• report::sarif::SARIF_SCHEMA
• runtime::DEFAULT_CLOCK_SKEW_SECONDS
• runtime::MANDATE_SCHEMA
• storage::schema::DDL