Struct VaultConfig 

#[non_exhaustive]
pub struct VaultConfig {
    pub key_normalization: bool,
    pub max_failures_before_lockout: u32,
    pub failure_window: Duration,
}

Vault configuration.

Concrete fields are added in later phases as each layer comes online. Marked #[non_exhaustive] so new fields are additive.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

key_normalization: bool

If true, raw key material is BLAKE3-normalized to 32 bytes before fragmentation. Default is true.

max_failures_before_lockout: u32

Failures (per key) within the configured failure_window required to trigger vault lockout. 0 disables threshold lockout entirely — failures still flow to the configured monitor but never lock the vault out. Default: 0 (disabled).

failure_window: Duration

Sliding window for the failure counter. Failures older than this fall off the counter for a given key. Default: 60 seconds.

Implementations

impl VaultConfig

pub fn new() -> Self

Default-on configuration with threshold lockout disabled.

Trait Implementations

impl Clone for VaultConfig

fn clone(&self) -> VaultConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VaultConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VaultConfig

fn default() -> Self

Returns the “default value” for a type.