Struct EnforcementStateMachine 

pub struct EnforcementStateMachine { /* private fields */ }

Per-extension enforcement state machine with hysteresis tracking.

Implementations

impl EnforcementStateMachine

pub fn new(profile: &str) -> Self

Create a new state machine for the given policy profile.

pub const fn with_config( bands: EnforcementScoreBands, hysteresis: EnforcementHysteresis, ) -> Self

Create with custom bands and hysteresis.

pub const fn state(&self) -> EnforcementState

Current enforcement state.

pub const fn evaluation_count(&self) -> u64

Total evaluations processed.

pub fn evaluate(&mut self, score: f64) -> EnforcementTransition

Evaluate a risk score and return the enforcement transition.

Escalation (moving to a more severe state) is immediate. De-escalation (moving to a less severe state) requires:

1. The score to fall below (entry_threshold - de_escalation_margin).
2. At least cooldown_calls consecutive evaluations in the lower band.

Terminate is a terminal state — once entered, it cannot be de-escalated.

pub fn merge_with_policy( enforcement: EnforcementState, policy: PolicyDecision, ) -> EnforcementState

Combine the enforcement state machine decision with a capability policy decision. The most restrictive outcome wins.

• If the policy denies the capability outright, the result is Deny regardless of the risk score.
• If the enforcement machine says Terminate, that overrides everything.

Trait Implementations

impl Clone for EnforcementStateMachine

fn clone(&self) -> EnforcementStateMachine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnforcementStateMachine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EnforcementStateMachine

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EnforcementStateMachine

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.