Struct ActorState 

pub struct ActorState {
    pub actor_id: String,
    pub risk_score: f64,
    pub rule_matches: Vec<RuleMatch>,
    pub anomaly_count: u64,
    pub session_ids: Vec<String>,
    pub first_seen: u64,
    pub last_seen: u64,
    pub ips: HashSet<IpAddr>,
    pub fingerprints: HashSet<String>,
    pub is_blocked: bool,
    pub block_reason: Option<String>,
    pub blocked_since: Option<u64>,
}

Per-actor state tracking.

Fields

actor_id: String

Unique actor identifier (UUID v4).

risk_score: f64

Accumulated risk score (0.0 - max_risk).

rule_matches: Vec<RuleMatch>

History of rule matches for this actor.

anomaly_count: u64

Count of anomalous behaviors detected.

session_ids: Vec<String>

Session IDs associated with this actor.

first_seen: u64

First seen timestamp (ms since epoch).

last_seen: u64

Last seen timestamp (ms since epoch).

ips: HashSet<IpAddr>

IP addresses associated with this actor.

fingerprints: HashSet<String>

Fingerprints associated with this actor.

is_blocked: bool

Whether this actor is currently blocked.

block_reason: Option<String>

Reason for blocking (if blocked).

blocked_since: Option<u64>

Timestamp when blocked (ms since epoch).

Implementations

impl ActorState

pub fn new(actor_id: String) -> Self

Create a new actor state.

pub fn touch(&mut self)

Update last seen timestamp.

pub fn add_ip(&mut self, ip: IpAddr)

Add an IP address to this actor.

pub fn add_fingerprint( &mut self, fingerprint: String, max_fingerprints: usize, ) -> bool

Add a fingerprint to this actor with a maximum limit.

Returns true if the fingerprint was added, false if at capacity or empty.

pub fn add_rule_match(&mut self, rule_match: RuleMatch, max_matches: usize)

Add a rule match to this actor’s history.

pub fn get_rule_match_count(&self, rule_id: &str) -> usize

Get the count of matches for a specific rule.

Trait Implementations

impl Clone for ActorState

fn clone(&self) -> ActorState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ActorState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ActorState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ActorState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.