Struct HotPathDeadlineConfig 

pub struct HotPathDeadlineConfig {
    pub guard_pipeline_budget_ms: u64,
    pub per_guard_budget_ms: BTreeMap<String, u64>,
    pub always_offload_guards: bool,
    pub dispatch_budget_ms: u64,
    pub per_server_dispatch_budget_ms: BTreeMap<String, u64>,
    pub receipt_append_budget_ms: u64,
    pub receipt_writer_poll_ms: u64,
    pub receipt_writer_stall_ms: u64,
}

Wall-clock budgets for the mediation hot path. All values are milliseconds. 0 means “no deadline” (unbounded) for the opt-in guard and dispatch budgets, so a deployment that never sets one runs byte-for-byte as it did before deadlines existed. The receipt-append budget may not be 0: an unbounded wedged-writer stall is never a valid posture, so it is rejected at load time and floor-clamped at read time as defense in depth.

Fields

guard_pipeline_budget_ms: u64

Budget for the whole guard pipeline, enforced around run_guards. 0 disables (preserves the inline path).

per_guard_budget_ms: BTreeMap<String, u64>

Per-guard overrides keyed by Guard::name(). A named guard is enforced against its own budget instead of the pipeline budget; 0 disables the override for that guard. Any entry forces per-guard offload. A BTreeMap keeps the canonical key order deterministic.

always_offload_guards: bool

Offload the guard pipeline to spawn_blocking even with no budget set, so a blocking guard never pins an async worker. Default false.

dispatch_budget_ms: u64

Default per-dispatch budget, enforced around the tool-server call. 0 disables. Default 0.

per_server_dispatch_budget_ms: BTreeMap<String, u64>

Per-tool-server dispatch overrides keyed by ServerId string.

receipt_append_budget_ms: u64

Watchdog bound on one receipt-append round trip through the commit actor. Must be >= MIN_RECEIPT_APPEND_BUDGET_MS. Default 5000.

receipt_writer_poll_ms: u64

Writer-liveness watchdog poll cadence.

receipt_writer_stall_ms: u64

Staleness threshold before a stuck writer is judged wedged.

Implementations

impl HotPathDeadlineConfig

pub fn validate(&self) -> Result<(), KernelBuildError>

Fail-closed load-time validation, run before kernel construction and mirrored in the config-file validator.

pub fn guard_pipeline_budget(&self) -> Option<Duration>

pub fn guard_budget_for(&self, name: &str) -> Option<Duration>

pub fn dispatch_budget_for(&self, server_id: &str) -> Option<Duration>

pub fn receipt_append_budget(&self) -> Duration

Effective append bound, clamped to the floor so a host that constructs a KernelConfig without running validation still never gets an unbounded (or below-floor) append.

Trait Implementations

impl Clone for HotPathDeadlineConfig

fn clone(&self) -> HotPathDeadlineConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HotPathDeadlineConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HotPathDeadlineConfig

fn default() -> Self

Returns the “default value” for a type.