Module profile 

Available on crate feature expression only.

DFE expression profile – allowed and restricted CEL functions.

The DFE profile restricts CEL to a high-performance subset suitable for per-record evaluation at ingest/query time. Functions with unbounded or unpredictable cost are blocked by default but can be unlocked per-category via ProfileConfig.

Structs

ProfileConfig

Configuration for the DFE expression profile.

Constants

ALLOWED_FUNCTIONS

CEL functions allowed unconditionally in the DFE profile.

DISALLOWED_FUNCTIONS

All restricted functions (union of all categories).

RESTRICTED_ITERATION

RESTRICTED_REGEX

Restricted function categories – blocked by default, opt-in via config.

RESTRICTED_TIME

Functions

check_profile

Scan an expression for restricted function calls using default config.

check_profile_with_config

Scan an expression for restricted function calls.