Struct MemoryValidator 

pub struct MemoryValidator { /* private fields */ }

The memory validator — gates all memory writes.

Implements the containment paper’s proposed “memory integrity validator” by checking trust scores, content validity, source allowlists, and prompt injection patterns before allowing a write to LMDB.

Implementations

impl MemoryValidator

pub const fn new(config: ValidatorConfig) -> Self

Create a new validator with the given config.

pub fn default() -> Self

Create with default config.

pub fn validate(&self, memory: &Memory) -> ValidationVerdict

Validate a memory before writing.

Checks trust score, content validity, source allowlist, injection patterns, and provenance signature (if required).

pub fn sign(&self, memory: &Memory) -> Result<String>

Sign a memory’s provenance.

Uses Ed25519 (ed25519:<hex>) when an Ed25519 key is configured, otherwise HMAC-SHA256 (bare hex). The signature is returned as a string and should be stored alongside the memory (e.g. in a tag).

pub fn verify_signature(&self, memory: &Memory) -> bool

Verify a memory’s provenance signature.

Dispatches on the signature scheme: ed25519:<hex> verifies against the configured Ed25519 public key; bare hex verifies as HMAC-SHA256 with a constant-time comparison. Returns false if the signature is missing, malformed, or doesn’t match.

pub fn sign_memory(&self, memory: Memory) -> Result<Memory>

Sign a memory and return a new copy with the signature tag attached.

pub const fn config(&self) -> &ValidatorConfig

Get the validator configuration.