Enum Decision 

pub enum Decision {
    Allow,
    Block {
        rule_id: String,
        reason: String,
    },
    Monitor {
        rule_id: String,
    },
    Score {
        rule_id: String,
        points: u32,
    },
    Scores(Vec<ScoreItem>),
    Reject {
        rule_id: String,
        reason: String,
        status: u16,
        retry_after: Option<u64>,
    },
}

Variants

Allow

Block

Fields

rule_id: String

reason: String

Monitor

Fields

rule_id: String

Score

A single contribution with explicit points — used for high-confidence rules or direct scoring where the module already knows the weight.

Fields

rule_id: String

points: u32

Scores(Vec<ScoreItem>)

Multiple contributions, one per matched rule, each carrying a severity. The pipeline resolves severity -> points via [waf.severity_scores], so the cumulative anomaly score (CRS-style) sums every matched rule — three Notice matches weigh more than one.

Reject

Direct rejection with an explicit HTTP status — distinct from Block (which is the 403 anomaly/high-confidence path). Used by rate limiting to return 429 with an optional Retry-After (seconds). In detection-only the pipeline logs it but does not reject.

Fields

rule_id: String

reason: String

status: u16

retry_after: Option<u64>

Trait Implementations

impl Clone for Decision

fn clone(&self) -> Decision

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Decision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Decision

impl PartialEq for Decision

fn eq(&self, other: &Decision) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Decision