Struct MemoryBudgetConfig 

pub struct MemoryBudgetConfig {
    pub receipt_mirror_capacity: usize,
    pub federation_cache_capacity: usize,
    pub federation_cache_idle_ttl_secs: u64,
    pub velocity_bucket_cap: usize,
    pub admission_key_cap: usize,
    pub journal_entry_cap: usize,
    pub max_stream_chunks: u64,
    pub journal_tool_counts_cap: usize,
    pub rss_soft_limit_bytes: Option<u64>,
    pub rss_sample_interval_secs: u64,
}

Per-process memory budget: bounded-structure capacities plus a process RSS soft ceiling. The soft ceiling is the in-process analog of the cgroup hard limit: the kernel sheds (Overloaded) before the OS OOM-kills it.

Fields

receipt_mirror_capacity: usize

federation_cache_capacity: usize

federation_cache_idle_ttl_secs: u64

velocity_bucket_cap: usize

admission_key_cap: usize

journal_entry_cap: usize

max_stream_chunks: u64

Max number of chunks retained from one streamed tool result. Bounds the retained Vec<ToolCallChunk> and the per-chunk signing preimage so a flood of tiny chunks that never trips max_stream_total_bytes still cannot grow memory without bound. 0 disables the cap.

journal_tool_counts_cap: usize

Max number of DISTINCT tool names retained in each session journal’s cumulative tool_counts map. Unlike the entries and tool_sequence rings, tool_counts is cumulative (it survives ring eviction so the behavioral-sequence guard can answer “was this tool ever invoked”), so a ring cannot bound it. Once a session reaches this many distinct tool names a previously-unseen name is dropped fail-closed: a dependent required-predecessor check then treats it as never-invoked and denies. Sized well above any legitimate (registry-bounded) tool set.

rss_soft_limit_bytes: Option<u64>

Process RSS soft ceiling in bytes. When set and exceeded, new admissions shed with Overloaded { Allocation }. Set to roughly 85-90% of the cgroup memory.max so the graceful stop fires before the kill. Stage A ships None.

rss_sample_interval_secs: u64

How often the RSS sampler reads /proc/self/statm.

Implementations

impl MemoryBudgetConfig

pub fn defaults() -> Self

Trait Implementations

impl Clone for MemoryBudgetConfig

fn clone(&self) -> MemoryBudgetConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MemoryBudgetConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for MemoryBudgetConfig

fn default() -> Self

Returns the “default value” for a type.