Struct QuerySecurityConfig 

pub struct QuerySecurityConfig { /* private fields */ }

Security controls for CD queries

TIMEOUT ALIGNMENT (per Codex iter3 review): Default timeout is 30s to match spec AC-8 (NON-NEGOTIABLE). This is the hard ceiling - CLI can allow users to specify LOWER values only.

PRIVATE FIELDS (per Codex iter6 review): All fields are private to prevent bypassing security limits. Use constructors (default(), interactive(), with_timeout()) and getters (timeout(), result_cap(), etc.) to access values. The 30s ceiling cannot be bypassed by direct field assignment.

Implementations

impl QuerySecurityConfig

pub const HARD_CEILING_TIMEOUT: Duration

The hard ceiling timeout (30s) - NON-NEGOTIABLE per spec AC-8

pub const DEFAULT_RESULT_CAP: usize = 10_000

Default result cap (10,000)

pub const DEFAULT_MEMORY_LIMIT: usize

Default memory limit (512 MB)

pub const DEFAULT_COST_LIMIT: usize = 1_000_000

Default cost limit (1M estimated operations)

pub fn interactive() -> Self

Create a config for interactive use with shorter timeout

Users can request shorter timeouts for faster feedback. Uses 10s timeout instead of 30s for responsiveness.

pub fn with_timeout(self, timeout: Duration) -> Self

Create a config with a custom timeout (capped at 30s)

IMPORTANT: The timeout is capped at 30s regardless of input. This enforces the NON-NEGOTIABLE security requirement from spec AC-8.

Builder pattern: Can be chained from other constructors: QuerySecurityConfig::default().with_timeout(Duration::from_secs(5))

pub fn with_result_cap(self, cap: usize) -> Self

Create a config with a custom result cap

Builder pattern: Can be chained from other constructors: QuerySecurityConfig::default().with_result_cap(100)

pub fn with_memory_limit(self, limit: usize) -> Self

Create a config with a custom memory limit (bytes)

Builder pattern: Can be chained from other constructors: QuerySecurityConfig::default().with_memory_limit(1024 * 1024) // 1MB

pub fn with_cost_limit(self, limit: usize) -> Self

Create a config with a custom cost limit

Builder pattern: Can be chained from other constructors: QuerySecurityConfig::default().with_cost_limit(500_000)

pub fn without_audit(self) -> Self

Create a config with audit logging disabled

Builder pattern: Can be chained from other constructors: QuerySecurityConfig::default().without_audit()

pub fn timeout(&self) -> Duration

Get the timeout duration

pub fn result_cap(&self) -> usize

Get the result cap

pub fn memory_limit(&self) -> usize

Get the memory limit (bytes)

pub fn audit_enabled(&self) -> bool

Check if audit logging is enabled

pub fn cost_limit(&self) -> usize

Get the cost limit

Trait Implementations

impl Clone for QuerySecurityConfig

fn clone(&self) -> QuerySecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for QuerySecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for QuerySecurityConfig

fn default() -> Self

Returns the “default value” for a type.