Module fpr_monitor 

Production FPR monitoring with drift detection (R-IS-01).

This module provides rolling-window false-positive rate monitoring per detection category, with drift detection and alert generation. When the observed FPR deviates from an established baseline beyond a configurable threshold, the monitor produces FprDriftAlert values that can be converted into SecurityFindings for the standard alerting pipeline.

Usage

use llmtrace_security::fpr_monitor::{FprMonitor, FprMonitorConfig};
use std::time::Duration;

let config = FprMonitorConfig {
    window_duration: Duration::from_secs(600),
    drift_threshold: 0.02,
    min_window_samples: 100,
    categories: vec!["injection".into(), "jailbreak".into()],
};
let mut monitor = FprMonitor::new(config);
monitor.record_event("injection", true, 0.92);

Structs

FprCategorySummary

Summary statistics for a single monitored category.

FprDriftAlert

Alert produced when FPR drift is detected for a category.

FprMonitor

Rolling-window FPR monitor with per-category drift detection.

FprMonitorConfig

Configuration for the FPR monitor.

FprMonitorSummary

Aggregated summary across all monitored categories.