Crate calybris_core 

Calybris Core

Deterministic proof-carrying decision kernel, HMAC-SHA256 hash-chained write-ahead log, CAS atomic budget engine, and fixed-point financial proofs.

• kernel: Allocation-free integer decision kernel (~8.6M prescribe/sec on CodSpeed CI)
• verify: Canonical digests, replay verification, correctness certificates
• receipt: Replay-verified receipts binding policy, state, WAL, and signatures
• finance: Ledger snapshots and fixed-point conservation proofs for pre-trade guard primitives
• wal: Single-writer hash-chained WAL with HMAC keying and trusted head anchors
• budget: Per-tenant atomic budget management with conservation invariant
• config: Runtime configuration with builder ergonomics
• builder: Builder patterns for KernelInput, KernelModel, PolicySnapshot
• persistence: Snapshot save/load and crash recovery
• async_wal: Non-blocking WAL via Tokio (feature async)
• instrument: Structured tracing instrumentation (feature observability)

use calybris_core::kernel::*;
use calybris_core::verify::{audit_bundle, verify_decision, VerifyResult};
use calybris_core::finance::certify_ledger;
use calybris_core::budget::BudgetEngine;
use calybris_core::builder::{InputBuilder, ModelBuilder, PolicyBuilder};
use calybris_core::config::EngineConfig;
#[cfg(feature = "wal")]
use calybris_core::wal::WalWriter;

Modules

budget

Per-tenant atomic budget engine with CAS reservation. Atomic budget engine with CAS (compare-and-swap) reservation management.

builder

Builder ergonomics for inputs, models, and policies. Builder ergonomics for crate::kernel::KernelInput and crate::kernel::PolicySnapshot.

certificate

Single proof envelope binding decision to full evidence chain. Decision certificates — one verifiable envelope per decision.

config

Runtime configuration and validation. Runtime configuration for policy tuning and budget limits.

digest

Canonical SHA-256 digests for audit binding. Canonical SHA-256 digests for cross-platform audit binding.

finance

Fixed-point financial layer: ledger digest and conservation proofs. Fixed-point financial proofs for pre-trade budget and exposure guards.

kernel

Allocation-free prescriptive decision kernel. Allocation-free prescriptive decision kernel.

persistence

Snapshot persistence and crash recovery. Snapshot persistence and point-in-time recovery.

proof

Single proof envelope binding a decision to its full evidence chain.

receipt

Signed receipt binding a decision to policy, state, and WAL evidence. Production decision receipts.

state

Stateful decision proofs: bind decisions to a state trajectory.

verify

Decision verification, replay, and correctness certificates. Decision verification, replay, and correctness certificates.

wal

HMAC-SHA256 hash-chained write-ahead log. Hash-chained Write-Ahead Log — tamper-evident, crash-detecting.