Struct RiskLayer 

pub struct RiskLayer { /* private fields */ }

A validated, runnable risk layer.

Immutable after construction and cheap to hold behind an Arc, so it can be swapped atomically on hot-reload while the sink task keeps a live snapshot for the duration of a batch.

Implementations

impl RiskLayer

pub fn risk_event_nats_subject(&self) -> Option<&str>

The optional NATS subject override for emitted risk events.

pub fn incident_config(&self) -> Option<&IncidentConfig>

The validated incident config, if the accumulator is enabled.

pub fn incident_nats_subject(&self) -> Option<&str>

The optional NATS subject override for emitted risk incidents.

pub fn process( &self, results: ProcessResult, state: &mut RiskState, now: i64, metrics: &dyn MetricsHook, ) -> RiskOutput

Annotate each in-scope detection with its risk score and risk objects, accumulate per-entity risk (emitting incidents on threshold crossings), and (opt-in) emit a compact risk event per (detection, risk object) pair. Out-of-scope results pass through untouched.

pub fn tick(&self, state: &mut RiskState, now: i64, metrics: &dyn MetricsHook)

Advance time: prune entities whose windows have aged out and refresh the open-entity and state-entry gauges. A no-op when the accumulator is off.

pub fn snapshot(&self, state: &RiskState) -> RiskStateSnapshot

Capture the accumulator into a versioned persistence snapshot.

pub fn restore( &self, state: &mut RiskState, snap: RiskStateSnapshot, now: i64, ) -> bool

Restore a snapshot into state, pruning entries past the window at now. Returns false on a version mismatch, or when no accumulator is configured to restore into (the caller starts fresh).

Trait Implementations

impl Debug for RiskLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.