Expand description
Shared types, error types, and oracle class definitions used across all parlov crates.
This crate is the dependency root of the workspace — it carries no deps on other workspace crates and is designed to compile fast. Everything in here is pure data: no I/O, no async, no heavy dependencies.
Structs§
- Block
Summary - Summary of what blocked observation opportunities during the scan.
- Contributing
Finding - One strategy’s contribution to the endpoint posterior.
- Differential
Set - Baseline and probe exchange pairs with technique context for differential analysis.
- Endpoint
Verdict - Aggregated oracle verdict for a single endpoint, produced after running all strategies.
- Oracle
Result - The result of running an oracle analyzer against a differential set.
- Probe
Definition - A single HTTP request to execute against a target.
- Probe
Exchange - Request and response paired so analyzers always have the full context of what was sent.
- Response
Surface - A single HTTP interaction: full response surface and wall-clock timing.
- Scoring
Reason - One contribution to confidence or impact — audit trail for verdict computation.
- Signal
- One piece of evidence — the atoms that classifiers compose into verdicts.
- Strategy
Meta ForStop - Slim technique metadata for the stop rule — vector + strength, no probe context.
- Technique
- Why these probes were generated and what normative basis justifies the expected differential.
Enums§
- Applicability
- Graded confidence that a technique’s applicability marker is observed in a response pair.
- Block
Family - Coarse categorisation of what caused a technique to be blocked.
- Endpoint
Stop Reason - Reason the scan stopped dispatching strategies.
- Error
- Probe, analysis, CLI, and serialization failures.
- Impact
Class - Classification of leak impact, independent of confidence.
- Normative
Strength - How strongly the RFC mandates the expected server behavior.
- Observability
Status - Orthogonal to
OracleVerdict: describes whether techniques actually reached the oracle layer and, if not, why. - Oracle
Class - The oracle class being probed.
- Oracle
Verdict - Confidence level of an oracle detection result.
- Request
Auth State - Whether and how an
Authorization-bearing credential was present on a request. - Response
Class - Discrete signal families used to gate harvest admission in Phase 2.
- Scoring
Dimension - Which axis a
ScoringReasoncontributes to. - Severity
- Severity of a confirmed or likely oracle.
- Signal
Kind - Categories of observable differential signals.
- Signal
Surface - Primary surface a technique’s contradiction is evaluated on.
- Strategy
Outcome - The outcome of running a single strategy, classified for aggregation.
- Strategy
Outcome Kind - Classification of a strategy outcome for aggregation.
- Vector
- Detection method being used to produce the differential.
Functions§
- always_
applicable - Default applicability function — always
Strong. - compute_
observability - Computes
ObservabilityStatusandBlockSummaryfrom a set ofContributingFindings. - finding_
id SHA-256(technique_id|target_url|oracle_class|method|strategy_id)truncated to 12 hex chars.- posterior_
to_ verdict - Maps a posterior probability to an
OracleVerdictvia threshold rules. - verdict_
to_ severity - Maps an
OracleVerdictto the appropriateSeverity, if any.