Struct VerificationProbe 

pub struct VerificationProbe {
    pub invoke: Box<dyn Fn() -> (Duration, Option<usize>) + Send + Sync>,
    pub iterations: usize,
    pub concurrency: usize,
}

A concrete, runnable measurement of the API under verification.

FormalVerificationEngine::verify_contract cannot confirm a contract’s performance/memory/thread-safety bounds against nothing: those are runtime properties of actually calling the API. Without a probe, verification honestly reports VerificationStatus::NotVerified (via a verified: false VerificationResult) rather than fabricating a pass.

Fields

invoke: Box<dyn Fn() -> (Duration, Option<usize>) + Send + Sync>

Invokes the API under test once, returning the wall-clock duration of the call and, if determinable, the net memory-usage delta caused by the call (in bytes). Measuring a memory delta is inherently caller-specific (e.g. via an allocator hook or process RSS sample), so None is an honest “not measured” rather than a fabricated zero.

iterations: usize

Number of sequential invocations used to build the timing/memory sample; the maximum observed value is compared against the contract (a conservative choice for a safety bound).

concurrency: usize

Number of concurrent threads used for the thread-safety smoke test when the contract claims ThreadSafety::ThreadSafe. 0 or 1 disables the concurrent check.

Implementations

impl VerificationProbe

pub fn from_timing(invoke: impl Fn() + Send + Sync + 'static) -> Self

Convenience constructor for a single-threaded, single-iteration probe that does not report a memory measurement.