Crate qae_kernel 

QAE Safety Certification Kernel — domain-agnostic action certification layer.

An agent proposes an action, the safety kernel certifies it, and the result is one of: Certified, CertifiedWithWarning, EscalateToHuman, or Blocked.

The kernel is domain-agnostic. Domain-specific logic (e.g., finance, agentic AI) is plugged in via the DomainAdapter trait.

Architecture

ProposedAction → DomainAdapter → ConstraintChannels → SafetyCertifier → SafetyCertificate

Key Traits

• DomainAdapter: Plugs domain-specific logic into the kernel
• ConstraintChannel: Evaluates a single constraint dimension
• ProposedAction: Represents an agent’s proposed action

Zero Finance Dependencies

This crate depends only on serialization, crypto (SHA-256), and timestamps. No nalgebra, ndarray, or domain-specific types.

Re-exports

pub use action::ActionPriority;

pub use action::ProposedAction;

pub use action::SimpleAction;

pub use action::StateDelta;

pub use certificate::CertificationDecision;

pub use certificate::SafetyCertificate;

pub use certificate::SafetyCertificateBuilder;

pub use certificate::SafetyZone;

pub use certifier::certify_action;

pub use certifier::CertifierConfig;

pub use certifier::SafetyCertifier;

pub use constraint::ConstraintChannel;

pub use declarative::ConstraintDefinition;

pub use declarative::DeclarativeChannel;

pub use declarative::MarginRule;

pub use declarative::ThresholdOverrides;

pub use domain::DomainAdapter;

pub use registry::ChannelConfig;

pub use registry::ChannelSummary;

pub use registry::ConstraintRegistry;

pub use registry::RegisteredChannel;

Modules

action

Proposed action types for the safety certification kernel.

certificate

Safety certificate — the output of the certification kernel.

certifier

SafetyCertifier — orchestrates the certification pipeline.

constraint

Domain-agnostic constraint channel trait for the safety kernel.

declarative

Declarative constraint channels — JSON/TOML-defined constraints evaluated at runtime.

domain

Domain adapter trait — plugs domain-specific logic into the safety kernel.

registry

Runtime registry for constraint channels.

Structs

DeterministicHash

Deterministic hash wrapper for reproducibility verification.

Enums

KernelError

Error types for the kernel.

Type Aliases

KernelResult

Result type alias for kernel operations.