Struct SentinelConfig 

pub struct SentinelConfig {
    pub decay_per_turn: f32,
    pub window_turns: u32,
    pub elevated_at: f32,
    pub high_at: f32,
    pub critical_at: f32,
    pub alert_threshold: f32,
    pub auto_recover_after_turns: u32,
    pub subagent_inheritance_factor: f32,
    pub high_call_rate_threshold: u32,
    pub unusual_read_threshold: u32,
}

Configuration for TrajectorySentinel, nested under [security.trajectory] in TOML.

Controls signal decay, risk level thresholds, auto-recovery, and subagent inheritance.

Example (TOML)

[security.trajectory]
decay_per_turn = 0.85
elevated_at = 2.0
high_at = 4.0
critical_at = 8.0
alert_threshold = 4.0
auto_recover_after_turns = 16
subagent_inheritance_factor = 0.5

Fields

decay_per_turn: f32

Multiplicative decay applied to the running score at each advance_turn() call.

Must be in (0.0, 1.0]. Default 0.85 gives a half-life of ≈ 4.3 turns.

window_turns: u32

Number of past turns to keep in the signal buffer.

Older signals are evicted once the buffer exceeds this size. Default 8.

elevated_at: f32

Score threshold for transitioning from Calm to Elevated. Default 2.0.

high_at: f32

Score threshold for transitioning from Elevated to High. Default 4.0.

critical_at: f32

Score threshold for transitioning from High to Critical. Default 8.0.

alert_threshold: f32

Score at which PolicyGateExecutor is notified via RiskAlert. Default 4.0.

Decoupled from elevated_at to prevent alert noise for routine minor events.

auto_recover_after_turns: u32

Consecutive Critical turns before a hard auto-recover reset. Minimum 4. Default 16.

subagent_inheritance_factor: f32

Fraction of parent score inherited by a subagent when parent is >= Elevated.

Default 0.5 (≈ one decay half-life). Config validator warns when this deviates more than 0.1 from decay_per_turn ^ (ln(0.5) / ln(decay_per_turn)).

high_call_rate_threshold: u32

Tool-call count per 3-turn window above which HighCallRate fires. Default 12.

unusual_read_threshold: u32

Distinct paths read within window_turns above which UnusualReadVolume fires. Default 24.

Implementations

impl TrajectorySentinelConfig

pub fn validate(&self) -> Result<(), String>

Validate numeric bounds. Returns an error string when validation fails.

Errors

Returns a description of the first validation failure found.

Trait Implementations

impl Clone for TrajectorySentinelConfig

fn clone(&self) -> TrajectorySentinelConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrajectorySentinelConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TrajectorySentinelConfig

fn default() -> TrajectorySentinelConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TrajectorySentinelConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<TrajectorySentinelConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrajectorySentinelConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.