Struct EnforcementEngine 

pub struct EnforcementEngine { /* private fields */ }

The enforcement engine. Owns the commitment history H_t (and thus the active subset K_t), the override policy, and the in-memory audit chain.

Implementations

impl EnforcementEngine

pub fn new() -> Self

pub fn from_state(state: EngineState) -> Self

From persisted state.

pub fn state(&self) -> EngineState

pub fn audit(&self) -> &[AuditChunk]

pub fn restore_audit(&mut self, chunks: Vec<AuditChunk>)

Reattach a persisted audit chain so new decisions continue it instead of re-seeding from the genesis node.

pub fn with_authorized_overrider(self, actor: impl Into<String>) -> Self

Add an override authority. An actor in this set may author a justified override; the default set contains guardian.

pub fn authorized_overriders(&self) -> &[String]

pub fn add_commitment( &mut self, actor: &str, forbidden_action: &str, scope: &str, content: &str, expires_at_ms: Option<u64>, ) -> u64

Add a new commitment to the history H_t. Returns the new id.

pub fn with_commitments(self, commitments: Vec<Commitment>) -> Self

Replace the whole history (used when loading persisted state).

pub fn history(&self) -> &[Commitment]

Full commitment history H_t.

pub fn active_commitments(&self, now_ms: u64) -> Vec<&Commitment>

The active subset K_t subset H_t at now_ms.

pub fn violations(&self, event: &ActionEvent) -> Vec<Violation>

Which active commitments does event violate?

pub fn justified_override( &self, event: &ActionEvent, justification: &str, ) -> Result<(), String>

The documented override path. A justification is accepted only when (1) an authorized overrider requested it and (2) the justification is recorded (non-empty and at least MIN_JUSTIFICATION_LEN characters).

pub fn decide( &mut self, event: &ActionEvent, justification: Option<&str>, ) -> Decision

The mandatory gate. Runs attribution + violates(), grants the documented override path, blocks hard on violation, and records every decision in the audit chain.

pub fn can_execute( &mut self, event: &ActionEvent, justification: Option<&str>, ) -> bool

Executor boundary gate: the native executor MUST run an action only if this returns true. Internally this runs the same mandatory decide() (attribution check, K_t selection, violates(), justifiedOverride()) and persists the decision to the audit chain. Blocked and AttributionError both yield false, so a non-permitted action never reaches an executor that respects this gate.

pub fn select_valid(&mut self, candidates: &[ActionEvent]) -> Vec<ActionEvent>

Restrict a candidate set to A_t^valid.

pub fn chain_valid(&self) -> bool

True whenever the in-memory chain is internally consistent.

Trait Implementations

impl Default for EnforcementEngine

fn default() -> Self

Returns the “default value” for a type.