Struct AnomalyDetector 

pub struct AnomalyDetector { /* private fields */ }

Top-level detector. Cheap to clone via Arc — the inner state is guarded by parking_lot RwLocks scoped per-detector to avoid cross-detector contention.

Implementations

impl AnomalyDetector

pub fn new(config: AnomalyConfig) -> Self

pub fn record_query(&self, ctx: &QueryObservation) -> Vec<AnomalyEvent>

Record a query event. Detectors may emit zero or more events. Returns the events emitted by THIS call (the caller can also poll recent_events for the full ring buffer).

pub fn record_auth( &self, user: &str, client_ip: &str, succeeded: bool, timestamp: Instant, iso_timestamp: &str, ) -> Option<AnomalyEvent>

Record an authentication outcome. Failed auths feed the credential-stuffing detector.

pub fn recent_events(&self, limit: usize) -> Vec<AnomalyEvent>

Snapshot of the most recent events. Newest first.

pub fn event_count(&self) -> usize

Total events ever recorded (since process start). Useful for metrics export.

Trait Implementations

impl Clone for AnomalyDetector

fn clone(&self) -> AnomalyDetector

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.