Skip to main content Crate guard_core_engine Copy item path Source binary_islands Binary islands reduction, ported from guard_core/detection_engine/ binary_islands.py (upstream commit 5f399234). body_scan Request body value extraction: the engine-side port of the reference
body-scanning split, mirroring the Go engine’s bodyscan.go. cloud_provider The cloud-provider IP table and block selectors. compiler detect Public detection entry point: the spec 4.0.2 SusPatternsManager.detect
pipeline (preprocess, four scan views, semantic analysis, scoring). geo The country gate: whitelist_countries and blocked_countries. headers_auth The required-headers and authentication gate. ip_ban The dynamic IP ban store and the auto-ban engine: ban_ip with a
duration, expiry-honoring is_banned, and the per-IP violation counters
with the threshold resolution both are fed by. ip_gate The global IP gate: whitelist, blacklist, and exempt_ips. json_walk Ordered JSON body walk, ported from the Go engine’s jsonwalk.go, which
ports guard_core/_utils/body_json_scan.py and embedded_json_scan.py. multipart_scan Line-based multipart scanner mirroring the extracted-value semantics of
Python’s email feedparser for multipart/form-data bodies. patterns Detection wiring for the compiled pattern table and its dispatch. preprocessor Content preprocessing ported from guard_core/detection_engine/preprocessor.py. rate_limit The sliding-window rate limiter: per client IP, global scope or per
endpoint. request_limits The request size and content-type gate: max_request_size and
allowed_content_types. semantic user_agent The blocked user-agent pattern filter.