Struct EntityState 

pub struct EntityState {

    pub entity_id: String,
    pub site_id: Option<String>,
    pub risk: f64,
    pub first_seen_at: u64,
    pub last_seen_at: u64,
    pub last_decay_at: u64,
    pub request_count: u64,
    pub blocked: bool,
    pub blocked_reason: Option<String>,
    pub blocked_since: Option<u64>,
    pub matches: HashMap<u32, RuleMatchHistory>,
    pub ja4_fingerprint: Option<String>,
    pub combined_fingerprint: Option<String>,
    pub previous_ja4: Option<String>,
    pub ja4_change_count: u32,
    pub last_ja4_change_ms: Option<u64>,
}

Per-IP entity state.

Fields

entity_id: String

IP address (primary key).

site_id: Option<String>

Site/tenant ID this entity is associated with (for multi-tenant isolation).

risk: f64

Accumulated risk score (0.0-max_risk).

first_seen_at: u64

First seen timestamp (ms).

last_seen_at: u64

Last seen timestamp (ms).

last_decay_at: u64

Last decay timestamp (ms).

request_count: u64

Total request count.

blocked: bool

Whether this entity is blocked.

blocked_reason: Option<String>

Reason for blocking.

blocked_since: Option<u64>

Timestamp when blocked (ms).

matches: HashMap<u32, RuleMatchHistory>

Rule match history (rule_id -> history).

ja4_fingerprint: Option<String>

JA4 fingerprint (if available).

combined_fingerprint: Option<String>

Combined fingerprint hash (for correlation).

previous_ja4: Option<String>

Previous JA4 fingerprint (for change detection).

ja4_change_count: u32

Count of JA4 changes within the tracking window.

last_ja4_change_ms: Option<u64>

Timestamp of last JA4 change (milliseconds).

Implementations

impl EntityState

pub fn new(entity_id: String, now: u64) -> Self

Create a new entity state for the given IP.

pub fn with_site(entity_id: String, site_id: String, now: u64) -> Self

Create a new entity state with a site ID.

pub fn get_match_multiplier(&self, rule_id: u32) -> f64

Get the repeat offender multiplier for a rule.

Returns 1.0 if rule hasn’t been matched before. Multiplier tiers: 1→1.0, 2→1.25, 6→1.5, 11→2.0

pub fn get_match_count(&self, rule_id: u32) -> u32

Get match count for a rule (0 if not matched).

Trait Implementations

impl Clone for EntityState

fn clone(&self) -> EntityState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EntityState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EntityState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EntityState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.