Struct NegativeCache 

pub struct NegativeCache { /* private fields */ }

Negative cache for degenerate queries.

If a query signature triggers degenerate mode more than N times in a window, forces SafetyNetBudget::DISABLED for subsequent matches, preventing repeated budget burn on the same attack vector.

Implementations

impl NegativeCache

pub fn new(threshold: u32, window: Duration, max_entries: usize) -> Self

Create a new negative cache.

Arguments

• threshold - Number of degenerate hits before blacklisting.
• window - Duration window for counting hits.
• max_entries - Maximum cache entries.

pub fn record_degenerate(&mut self, sig: QuerySignature) -> bool

Record a degenerate query hit. Returns true if the query is now blacklisted (should force DISABLED safety net).

pub fn is_blacklisted(&self, sig: &QuerySignature) -> bool

Check if a query signature is blacklisted.

pub fn len(&self) -> usize

Number of currently tracked signatures.

pub fn is_empty(&self) -> bool

Check if the cache is empty.