Struct GateHealthRegistry 

pub struct GateHealthRegistry { /* private fields */ }

Per-(tenant, gate) error budgets for a running proxy (app-level, shared across requests; ADR 0004 §D6). Budgets (window + max abstain fraction) are registered per gate id at startup; the actual rolling-window accounting is a separate GateHealth per (tenant, gate) pair, so one tenant tripping a gate’s budget auto-disables it only for that tenant, not globally. With auth off every request carries the tenant id "default", so there is exactly one bucket per gate and behavior is unchanged from the pre-D6 global registry.

Unregistered gates default to enabled with no accounting (a gate the operator didn’t register a budget for is simply never auto-disabled).

Implementations

impl GateHealthRegistry

pub fn new() -> Self

Empty registry — every gate enabled, no accounting.

pub fn with_budget( self, gate_id: impl Into<String>, window: usize, max_error_rate: f64, ) -> Self

Register an error budget for gate_id (window size + max abstain fraction).

pub fn enabled(&self, tenant: &str, gate_id: &str) -> bool

Whether gate_id is currently enabled for tenant (unregistered gates are always enabled; a poisoned accounting lock fails open rather than blocking every request).

pub fn record(&self, tenant: &str, gate_id: &str, errored: bool)

Record one outcome for (tenant, gate_id) (errored = abstained/crashed). No-op if the gate has no registered budget, or if the accounting lock is poisoned.

Trait Implementations

impl Debug for GateHealthRegistry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GateHealthRegistry

fn default() -> GateHealthRegistry

Returns the “default value” for a type.