Struct AnomalyMonitor 

pub struct AnomalyMonitor<K> { /* private fields */ }

Composes one or more AnomalyRules into a single observer over a ProtocolEvent stream.

Owns a reusable scratch Vec<Anomaly<K>> so each call to observe / on_tick doesn’t re-allocate when rules emit nothing — the typical case.

Implementations

impl<K> AnomalyMonitor<K>

pub fn new() -> Self

Empty monitor — start adding rules via with_rule or add_rule.

pub fn with_rule<R: AnomalyRule<K> + 'static>(self, rule: R) -> Self

Builder-style add — consumes and returns self.

pub fn add_rule<R: AnomalyRule<K> + 'static>(&mut self, rule: R)

In-place add — for cases where the rule set is computed dynamically. The Box<dyn ..> allocation matches the static with_rule form.

pub fn rule_count(&self) -> usize

Number of rules registered.

pub fn rule_names(&self) -> impl Iterator<Item = &'static str> + '_

Rule names in insertion order — useful for logging / metrics setup.

pub fn observe(&mut self, evt: &ProtocolEvent<K>) -> Vec<Anomaly<K>>

Push evt through every registered rule and return any resulting anomalies. The returned Vec is freshly allocated each call so the caller can keep it without fighting the borrow checker; the internal scratch buffer is left empty for the next call.

pub fn on_tick(&mut self, now: Timestamp) -> Vec<Anomaly<K>>

Drive the time-bound part of every rule. Call once per sweep tick (the same cadence as your tokio::time::interval).

Trait Implementations

impl<K> Debug for AnomalyMonitor<K>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<K> Default for AnomalyMonitor<K>

fn default() -> Self

Returns the “default value” for a type.