Re-exports§
pub use registry::Canonicalizer;pub use registry::FamilyPolicyTable;pub use registry::RecognizerRegistry;pub use registry::RecognizerRegistryBuilder;pub use registry::ValidationResult;pub use registry::Validator;pub use resolver::resolve_candidates;pub use resolver::resolve_candidates_with_policy;pub use rulepack::recognizer_composition_validator;pub use rulepack::AnchoredBoundary;pub use rulepack::ContextSpec;pub use rulepack::CuePosition;pub use rulepack::LocaleBucket;pub use rulepack::LocaleCueBundle;pub use rulepack::LocaleData;pub use rulepack::NameShape;pub use rulepack::NormalizerSpec;pub use rulepack::RawMatch;pub use rulepack::RecognizerSpec;pub use rulepack::Rulepack;pub use rulepack::RulepackError;pub use rulepack::RulepackSource;pub use rulepack::ScoringSpec;pub use rulepack::SourceSpec;pub use rulepack::TokenSpec;pub use rulepack::ValidatorSpec;
Modules§
Structs§
- Candidate
- Candidate PII span emitted by a recognizer before final conflict resolution.
- Class
Rule - Codec
Audit Row - Metadata-only audit row emitted by a document codec.
- Codec
Capability Set - Orthogonal document codec capabilities delivered or advertised by a codec.
- Collision
Membership - Collision-family membership metadata for one recognizer.
- Column
Rule - Context
- Context
Dictionary - Context
Fields Ref - Default
Rule - Detect
Context - Context supplied to recognizers during detection.
- Detection
- A detected span and its class/source metadata.
- Detector
Spec - Dictionary
Bundle - Value-only dictionary bundle shared with recognizers.
- Dictionary
Entry - Value-only dictionary entry; compiled automatons live outside
gaze-types. - Dictionary
Stats - Dictionary metadata used for diagnostics and tests.
- Document
Extension - Signed document-context metadata carried inside a session snapshot envelope.
- Document
Extension Builder - Builder for
DocumentExtensionthat requires signed integrity-binding fields. - Emitted
Token Span - A replacement emitted by the pseudonymization pipeline.
- Exec
Policy - Leak
Report - A suspected missed PII span reported by a
SafetyNet. - Leak
Report Stats - Aggregate leak report statistics.
- Leak
Suspect - Suspected leak reported by an observer-only safety net.
- Locale
Chain - Ordered locale fallback chain.
- Manifest
- Set of emitted token spans for one clean text segment.
- NerPolicy
- Pipeline
- The stateless PII pseudonymization engine.
- Pipeline
Builder - Builder for
Pipeline. - Pipeline
Optimization Config - Policy
- Loaded redaction policy from a TOML configuration file.
- Redaction
Entry - One row of redaction metadata emitted to a
RedactionLogger. - Restore
Event - Restore
Telemetry - Restored
Text - Rule
Context - Rulepack
Dict - Dictionary declared by a rulepack.
- Rulepack
Policy - Safety
NetContext - Context passed to a privacy safety net.
- Safety
NetPolicy - Sandbox
Plan - Backend-produced execution plan. v0.2 only lands the trait shape, so this remains a simple command description rather than a spawned process.
- Sensitive
Snapshot - Serializable snapshot of a
Session’s token manifest. - Session
- Owns the token manifest for one pseudonym namespace.
- Session
Policy - Session
Snapshot Entry - Typed
Context - Untrusted
Exec Request - Agent-controlled execution input. This is never handed directly to a sandbox backend; core validates it first.
- Validated
Exec Request - Trusted execution request after core-side validation.
Enums§
- Action
- Disposition applied to a detected PII span.
- Clean
Document - The pseudonymized output from
Pipeline::redact. - Conflict
Tier - Conflict resolution tier that selected or rejected a candidate.
- Context
Error - Detector
Kind - Dictionary
Load Error - Error raised when constructing invalid dictionary entries.
- Dictionary
Source - Source of a dictionary entry.
- Document
Extension Error - Errors returned while building a
DocumentExtension. - Document
Kind - Source document kind for metadata-only audit logging.
- Error
- Extraction
Density Policy - Per-codec declaration for text extraction density checks.
- Fallback
Reason - Safety-net fallback reason recorded in metadata-only audit rows.
- Leak
Kind - The category of a suspected missed PII span.
- Leak
Report Telemetry - Bytes-free telemetry emitted by safety-net orchestration.
- Locale
Error - Locale parsing error.
- Locale
Tag - Locale tag recognized by policy and recognizers.
- Open
AiPrivate Label - Closed set of upstream OpenAI Privacy Filter labels accepted by Gaze.
- PiiClass
- The category of a detected PII span.
- Policy
Error - RawDocument
- The input document submitted for pseudonymization.
- Redaction
LogError - Closed error set for redaction log sinks.
- Restore
Decision - Restore
Event Kind - Restore
Policy - Rule
Spec - Safety
NetError - Exhaustive, closed error set for safety-net execution.
- Safety
NetFallback - Safety
NetMode - Safety
NetPii Class - Closed safety-net PII vocabulary before mapping into
PiiClass. - Safety
Tier - Rulepack recognizer activation tier.
- Sandbox
Error - Scope
- Persistence scope of a
Session’s token manifest. - Session
Scope - Text
Origin - Provenance of text extracted from a document or transcript source.
- Value
- Minimal structured value representation that avoids a serde_json dependency.
Constants§
- BUILTIN_
CLASS_ NAMES - Built-in class labels in stable display order.
- DEFAULT_
NER_ THRESHOLD - DEFAULT_
POLICY_ SCHEMA_ VERSION - Schema version stamped on policy.toml documents that omit the field.
- RESERVED_
BUNDLED_ FAMILIES - Family names reserved for bundled collision-policy rulepacks.
- RESTORE_
PHASE_ FRESH_ PII_ SCAN - RESTORE_
PHASE_ MANIFEST_ BYPASS_ SCAN - RESTORE_
PHASE_ MANIFEST_ LOOKUP - RESTORE_
PHASE_ UNKNOWN_ TOKEN_ SCAN - SUPPORTED_
POLICY_ SCHEMA_ MAJOR_ MINOR major.minorprefix of the policy schema versions this build accepts.
Traits§
- Detector
- Shared detector contract for text-only PII detection.
- Dictionary
Bundle Ext - Recognizer
- Shared recognizer contract for locale-aware PII candidates.
- Redaction
Logger - Trait for audit sinks that receive redaction metadata.
- Rule
- Safety
Net - Observer-only post-clean check (Pass 3 in the detection pipeline).
- Sandbox
- Sandbox backends operate only on validated requests. The trust boundary is explicit: core validates agent-controlled argv/env/path input before any backend-specific wrapping is applied.