libfse 0.1.2

Fused Semantic Execution: fail-closed policy engine with O(1)-in-rule-count scanning, zero-allocation hot path, and guaranteed enforcement semantics.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

// Fused Semantic Execution (FSE)
// Copyright (c) 2026 Michael Kuykendall / DZERO. All rights reserved.
//
// PATENT PENDING. This library implements inventions covered by a pending US patent
// application for Fail-Closed Semantic Enforcement methods.
//
// This source is distributed under the MIT license for non-commercial, evaluation,
// and internal research purposes ONLY. Commercial use, embedding in products, or
// creation of derivative works requires a separate commercial license.
// Contact: michaelallenkuykendall@gmail.com
//
// Portions of the graph compilation logic may utilize algorithms from `aho-corasick`
// (MIT License, Andrew Gallant). The Execution Kernel and Policy Fusion logic
// are original works subject to the patent notice above.

pub mod scanner;
pub mod store;
pub mod metrics;

#[cfg(test)]
mod tests_integration;


pub use scanner::{FseScanner, ScanSummary, ScanCursor, Violation};
pub use store::FseMap;
// pub mod automaton; // Deprecated by scanner/store
// pub mod compiler;  // Deprecated by scanner/store
// pub mod runtime;   // Deprecated by scanner/store

/// Dense RuleId (0..rule_count). Keep it small and indexable.
pub type RuleId = u32;

/// Optional: context-shift / mode control hooks.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum ControlOp {
    /// Reset scanner-local rule state (bitsets/counters) but keep automaton state.
    ResetRuleState,
    /// User-defined mode switch slot.
    Mode(u32),
}

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum FseOpcode {
    Ignore,
    Record(RuleId),
    Reject(RuleId),
    Control(ControlOp),
}

/// Input rule definition for compilation.
#[derive(Debug, Clone)]
pub struct Rule {
    pub pattern: Vec<u8>,
    pub opcode: FseOpcode,
}

impl Rule {
    pub fn new<P: AsRef<[u8]>>(pattern: P, opcode: FseOpcode) -> Self {
        Self {
            pattern: pattern.as_ref().to_vec(),
            opcode,
        }
    }
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub enum ScanResult {
    /// Continue scanning.
    Continue,
    /// Stop immediately due to critical rule violation.
    Rejected(RuleId),
}