Struct EnsembleConfig 

pub struct EnsembleConfig {
    pub enabled: bool,
    pub verify: bool,
    pub members: Vec<String>,
    pub ema_alpha: f64,
    pub ema_decay: f64,
    pub min_observations: u32,
    pub member_timeout_secs: u64,
}

Configuration for ORCH-style deterministic verifier ensemble-merge ([orchestration.ensemble] TOML section, spec 073-orch-ensemble-merge).

Opt-in and default-OFF: when enabled = false (the default), PlanVerifier::verify() behaves byte-for-byte identically to the single-provider path — no ensemble code runs.

size and min_quorum are intentionally NOT configurable fields — both are always derived from members.len() (quorum = members.len() / 2 + 1) so they can never drift out of sync with the member list.

Fields

enabled: bool

Enable ensemble machinery (member resolution at bootstrap). Default: false.

Separate from verify so the ensemble can be resolved/warmed without yet being used for verification decisions.

verify: bool

Use the ensemble for PlanVerifier per-task verification. Default: false.

Requires enabled = true. When false (even with enabled = true), the SchedulerAction::Verify handler still uses the single-provider verify_provider path — verify is the per-target activation flag.

members: Vec<String>

Provider names from [[llm.providers]], one per ensemble member.

Validated at config load time (when enabled && verify) to be odd-length, >= 3, and free of duplicates — this guarantees a strict majority with no ties by construction. Default: empty.

ema_alpha: f64

EMA smoothing factor for EnsembleTracker’s per-member agreement score, in [0.0, 1.0]. Higher values weight the most recent observation more heavily. Default: 0.3.

ema_decay: f64

Decay-toward-neutral-prior factor for EnsembleTracker, in [0.0, 1.0]. Default: 0.95.

min_observations: u32

Minimum recorded observations before EnsembleTracker::ema() returns a score instead of None (cold-start gate). Default: 5.

member_timeout_secs: u64

Per-member chat_typed call timeout in seconds. 0 = fall back to verifier_timeout_secs. Default: 0.

Trait Implementations

impl Clone for EnsembleConfig

fn clone(&self) -> EnsembleConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnsembleConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EnsembleConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for EnsembleConfig

where EnsembleConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EnsembleConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.