Skip to main content

BehavioralProfileGuard

Struct BehavioralProfileGuard 

Source
pub struct BehavioralProfileGuard { /* private fields */ }
Expand description

Guard that computes behavioral-anomaly signals from the receipt store and emits advisories without blocking the request.

Implementations§

Source§

impl BehavioralProfileGuard

Source

pub fn new(feed: Box<dyn ReceiptFeedSource>) -> Self

Construct a new guard with the default configuration and a system-clock now source.

Source

pub fn with_config( feed: Box<dyn ReceiptFeedSource>, config: BehavioralProfileConfig, ) -> Self

Construct with an explicit config.

Source

pub fn with_clock(self, clock: Box<dyn Fn() -> u64 + Send + Sync>) -> Self

Override the clock source. Useful for deterministic tests.

Source

pub fn observe_sample( &self, agent_id: &str, metric: BehavioralMetric, sample: f64, window_start: u64, ) -> Result<ObservationOutcome, KernelError>

Feed the guard a fresh sample and return whether the window should be flagged as anomalous. Exposed for tests and dashboards that want to surface scores without running the full pipeline.

Source

pub fn baseline( &self, agent_id: &str, metric: BehavioralMetric, ) -> Result<Option<EmaBaselineState>, KernelError>

Access the snapshot of a (agent, metric) baseline.

Trait Implementations§

Source§

impl Guard for BehavioralProfileGuard

Source§

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).
Source§

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more