Struct FocusInputs 

pub struct FocusInputs<'a> {
    pub graph_facts: &'a [FocusFileFactsPaths],
    pub boundary_files: &'a [BoundaryZoneFile],
    pub public_api_added: &'a [String],
    pub coordination_changed_files: &'a [String],
    pub taint_touched_files: &'a [String],
    pub runtime: Option<&'a RuntimeFocus>,
}

Everything the focus extractor needs, gathered from the assembled brief data. All path-spaces are root-relative + forward-slashed (the brief’s canonical space), so signal joins are byte-exact.

Fields

graph_facts: &'a [FocusFileFactsPaths]

Per-file graph facts (fan-in/out + confidence-flag signals) from Engine focus facts, path-resolved. The unit spine.

boundary_files: &'a [BoundaryZoneFile]

Root-relative from_files of introduced boundary edges. A unit file in this set carries the boundary risk-zone signal.

public_api_added: &'a [String]

The exports-aware public-API surface delta keys (<rel_path>::<name>). A unit file that is the <rel_path> prefix of any key carries the public-API risk-zone AND new/widened-export change-shape signals.

coordination_changed_files: &'a [String]

Root-relative changed-file paths that changed a contract consumed outside the diff (coordination-gap changed_files). A unit file here carries the signature-change change-shape signal (syntactic proxy, ADR-001).

taint_touched_files: &'a [String]

Root-relative file paths a security source -> sink taint trace touches (reuse SecurityFinding.trace). EMPTY on the brief path today (the taint engine is the opt-in fallow security command); the seam lights up the moment a security pass is threaded, with no focus-map code change.

runtime: Option<&'a RuntimeFocus>

Per-file runtime evidence (paid). None in free mode, where the focus map degrades to the deterministic no-runtime baseline byte-for-byte; Some on the --runtime-coverage path, where it weights hot files and enables safe-skip.