Re-exports§
pub use registry::Canonicalizer;pub use registry::RecognizerRegistry;pub use registry::RecognizerRegistryBuilder;pub use registry::ValidationResult;pub use registry::Validator;pub use resolver::resolve_candidates;pub use rulepack::recognizer_composition_validator;pub use rulepack::AnchoredBoundary;pub use rulepack::ContextSpec;pub use rulepack::CuePosition;pub use rulepack::LocaleBucket;pub use rulepack::LocaleData;pub use rulepack::NameShape;pub use rulepack::NormalizerSpec;pub use rulepack::RawMatch;pub use rulepack::RecognizerSpec;pub use rulepack::Rulepack;pub use rulepack::RulepackError;pub use rulepack::RulepackSource;pub use rulepack::ScoringSpec;pub use rulepack::SourceSpec;pub use rulepack::TokenSpec;pub use rulepack::ValidatorSpec;
Modules§
Structs§
- Candidate
- Candidate PII span emitted by a recognizer before final conflict resolution.
- Class
Rule - Column
Rule - Context
- Context
Dictionary - Context
Fields Ref - Default
Rule - Detect
Context - Context supplied to recognizers during detection.
- Detection
- A detected span and its class/source metadata.
- Detector
Spec - Dictionary
Bundle - Value-only dictionary bundle shared with recognizers.
- Dictionary
Entry - Value-only dictionary entry; compiled automatons live outside
gaze-types. - Dictionary
Stats - Dictionary metadata used for diagnostics and tests.
- Emitted
Token Span - A replacement emitted by the pseudonymization pipeline.
- Exec
Policy - Leak
Report - A suspected missed PII span reported by a
SafetyNet. - Leak
Report Stats - Aggregate leak report statistics.
- Leak
Suspect - Suspected leak reported by an observer-only safety net.
- Locale
Chain - Ordered locale fallback chain.
- Manifest
- Set of emitted token spans for one clean text segment.
- NerPolicy
- Pipeline
- The stateless PII pseudonymization engine.
- Pipeline
Builder - Builder for
Pipeline. - Policy
- Loaded redaction policy from a TOML configuration file.
- Redaction
Entry - One row of redaction metadata emitted to a
RedactionLogger. - Rule
Context - Rulepack
Dict - Dictionary declared by a rulepack.
- Rulepack
Policy - Safety
NetContext - Context passed to a privacy safety net.
- Sandbox
Plan - Backend-produced execution plan. v0.2 only lands the trait shape, so this remains a simple command description rather than a spawned process.
- Sensitive
Snapshot - Serializable snapshot of a
Session’s token manifest. - Session
- Owns the token manifest for one conversation or request.
- Session
Policy - Typed
Context - Untrusted
Exec Request - Agent-controlled execution input. This is never handed directly to a sandbox backend; core validates it first.
- Validated
Exec Request - Trusted execution request after core-side validation.
Enums§
- Action
- Disposition applied to a detected PII span.
- Clean
Document - The pseudonymized output from
Pipeline::redact. - Conflict
Tier - Conflict resolution tier that selected or rejected a candidate.
- Context
Error - Detector
Kind - Dictionary
Load Error - Error raised when constructing invalid dictionary entries.
- Dictionary
Source - Source of a dictionary entry.
- Document
Kind - Source document kind for metadata-only audit logging.
- Error
- Leak
Kind - The category of a suspected missed PII span.
- Leak
Report Telemetry - Bytes-free telemetry emitted by safety-net orchestration.
- Locale
Error - Locale parsing error.
- Locale
Tag - Locale tag recognized by policy and recognizers.
- Open
AiPrivate Label - Closed set of upstream OpenAI Privacy Filter labels accepted by Gaze.
- PiiClass
- The category of a detected PII span.
- Policy
Error - RawDocument
- The input document submitted for pseudonymization.
- Redaction
LogError - Closed error set for redaction log sinks.
- Rule
Spec - Safety
NetError - Exhaustive, closed error set for safety-net execution.
- Safety
NetPii Class - Closed safety-net PII vocabulary before mapping into
PiiClass. - Sandbox
Error - Scope
- Lifetime scope of a
Session’s token manifest. - Session
Scope - Value
- Minimal structured value representation that avoids a serde_json dependency.
Constants§
- BUILTIN_
CLASS_ NAMES - Built-in class labels in stable display order.
- DEFAULT_
NER_ THRESHOLD
Traits§
- Detector
- Shared detector contract for text-only PII detection.
- Dictionary
Bundle Ext - Recognizer
- Shared recognizer contract for locale-aware PII candidates.
- Redaction
Logger - Trait for audit sinks that receive redaction metadata.
- Rule
- Safety
Net - Observer-only post-clean check (Pass 3 in the detection pipeline).
- Sandbox
- Sandbox backends operate only on validated requests. The trust boundary is explicit: core validates agent-controlled argv/env/path input before any backend-specific wrapping is applied.