Enum RiskSignal 

pub enum RiskSignal {
    VigilFlagged(VigilRiskLevel),
    PolicyDeny,
    ExfiltrationRedaction,
    OutOfScope,
    PiiRedaction,
    ToolFailure,
    HighCallRate,
    UnusualReadVolume,
    ToolPairTransition,
}

Risk signal emitted by security subsystems and accumulated by TrajectorySentinel.

Each variant maps to a configurable weight (see spec 050 §2 for defaults). NovelTool is deferred to Phase 2 and not present here.

NEVER

Never expose signal values or the accumulated score to any LLM-callable surface.

Variants

VigilFlagged(VigilRiskLevel)

VIGIL flagged a tool output with the given confidence level.

PolicyDeny

PolicyEnforcer denied a structured tool call.

ExfiltrationRedaction

ExfiltrationGuard redacted at least one outbound URL or HTML img.

OutOfScope

Tool call rejected as out-of-scope by ScopedToolExecutor.

PiiRedaction

PII filter redacted ≥ 1 span in a tool output.

ToolFailure

Tool returned a non-zero exit code or unrecoverable error.

HighCallRate

More than high_call_rate_threshold tool calls in the last 3 turns.

UnusualReadVolume

More than unusual_read_threshold distinct paths read in window_turns.

ToolPairTransition

A configured high-risk tool-pair transition occurred within K turns.

Implementations

impl RiskSignal

pub fn default_weight(self) -> f32

Returns the default weight for this signal (configurable in Phase 2).

Weights are finite and non-negative; this upholds the NEVER-negative-score invariant.

impl RiskSignal

pub fn from_code(code: u8) -> Self

Convert a u8 signal code from RiskSignalSink callbacks into a RiskSignal.

Code table (mirrors the numeric constants used in zeph-tools):

• 1 = PolicyDeny
• 2 = ExfiltrationRedaction
• 3 = OutOfScope
• 4 = PiiRedaction
• 5 = ToolFailure
• 6 = VigilFlagged(Medium)
• 7 = VigilFlagged(High)
• anything else = VigilFlagged(Low) (fallback)

Trait Implementations

impl Clone for RiskSignal

fn clone(&self) -> RiskSignal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RiskSignal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for RiskSignal

fn eq(&self, other: &RiskSignal) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for RiskSignal

impl Eq for RiskSignal

impl StructuralPartialEq for RiskSignal