Struct DecisionLog 

pub struct DecisionLog { /* private fields */ }

The per-run recorder.

Implementations

impl DecisionLog

pub fn install(data: &mut StoreData, config: DecisionLogConfig) -> Arc<Self>

Wraps the store’s security check in a recording decorator. Returns the log to read results from.

Install it outermost: after any embedder wrapper of the check (such as the server’s audit decorator). Other wrappers do not forward SecurityCheck::recorder, so a recorder installed beneath one is invisible to the host functions that begin calls.

pub fn install_observed( data: &mut StoreData, config: DecisionLogConfig, observer: Option<Arc<dyn RecordObserver>>, ) -> Arc<Self>

install, with an observer that sees each record as it is made.

pub fn new( config: DecisionLogConfig, observer: Option<Arc<dyn RecordObserver>>, ) -> Arc<Self>

A log not yet attached to a run; wrap a check to record through it. The clock starts now.

pub fn wrap( self: &Arc<Self>, inner: Arc<dyn SecurityCheck>, ) -> Arc<dyn SecurityCheck>

inner, with every decision it audits also recorded here. For a check made outside a program run, such as a server’s file tool; a run uses install.

pub fn finish(&self) -> DecisionLogOutput

Takes the run’s records and releases their byte charge. Call once, when the run ends: the truncation flags, drop count, and call numbering describe the whole run, so a later call would not describe only its own records.

Trait Implementations

impl DecisionRecorder for DecisionLog

fn begin_call( &self, caller: &str, capability: &str, line: Option<SourceLine>, ) -> CallTicket

A new host call. line is the program line that led to it, when known.

fn enter_host_call(&self) -> u64

A host function that can begin calls was entered. Returns the marker its exit_host_call passes back.

fn exit_host_call(&self, marker: u64, returned: bool)

That host function returned (returned) or failed. Ends every call begun since marker that is still open; a nested host function has ended its own already.

fn wants_payload(&self, call_index: u64) -> bool

Whether a payload for the call call_index would be kept: the call is open and the payload budget is not spent. Callers check it before building a payload. The default asks for every payload.

fn call_payload(&self, call_index: u64, side: Side, payload: Payload<'_>)

One side of a call that reached outside the program.

fn call_usage(&self, call_index: u64, usage: ModelUsage)

Token counts a model provider reported for a call.

fn wants_line(&self) -> bool

Whether the next call’s source line would be kept. Callers check it before paying for a backtrace; it is false once the decision cap is reached, the byte budget cannot fit even a bare record, a record has been dropped whole for want of bytes, or the frame budget is exceeded. Other truncation (a payload drop, the pair cap) does not turn it off.

fn note_line_capture(&self, frames: usize)

Counts the frames of a backtrace captured for a line. Past the recorder’s frame budget it marks the run truncated and stops further captures.

fn mark_last_filtered(&self)

Marks the latest call’s record as a denial the host function treated as a filter.