Struct CanaryTrendObservation 

pub struct CanaryTrendObservation {
    pub signature: String,
    pub score: f64,
    pub severity: TrendSeverity,
    pub contributing_findings: usize,
    pub skipped_findings: usize,
    pub trap_count: usize,
    pub confirmed_count: usize,
    pub fired_probe_ids: Vec<String>,
    pub captured_at_epoch_ms: u64,
}

Deterministic, JSON-stable trend observation built from an IntegrityCanaryReport.

The signature field is the canonical trend key — two observations with the same signature describe the same finding set (same probe ids + outcomes + weights), so a future trend aggregator can collapse identical signals without recomputing them.

Example

use stygian_browser::integrity_canary::{
    CanaryTrendObservation, IntegrityCanaryReport, IntegrityProbe,
};

let finding = IntegrityProbe::confirmed_finding(
    "webdriver_descriptor_native",
    0.20,
    "data property leak",
);
let report = IntegrityCanaryReport::from_findings(vec![finding]);
let obs = CanaryTrendObservation::from_report(&report);
assert!(obs.signature.starts_with("fnv64:"));
assert!(obs.score > 0.0);

Fields

signature: String

Stable fnv64:<hex> signature over (probe ids + outcomes + weights). Two reports with the same findings produce the same signature, so the trend aggregator can bucket by this key directly.

score: f64

Aggregate risk score in [0.0, 1.0].

severity: TrendSeverity

Coarse severity band derived from the score.

contributing_findings: usize

Number of findings that contributed to the score.

skipped_findings: usize

Number of findings that were skipped.

trap_count: usize

Number of trap findings (Suspected or Confirmed).

confirmed_count: usize

Number of confirmed findings.

fired_probe_ids: Vec<String>

Distinct probe ids that fired with a trap outcome, in evaluation order.

captured_at_epoch_ms: u64

Captured observation timestamp (Unix epoch ms). Populated via crate::freshness::unix_epoch_ms when the observation is built; serialised as a u64 for downstream automation.

Implementations

impl CanaryTrendObservation

pub fn from_report(report: &IntegrityCanaryReport) -> Self

Build a trend observation from an IntegrityCanaryReport.

The signature is computed over the probe ids, outcomes, and weights — two reports with identical findings produce identical signatures so the trend aggregator can dedupe without recomputing.

pub const fn has_trap_signal(&self) -> bool

true when the observation carries a trap signal (Suspected or Confirmed).

pub const fn is_confirmed(&self) -> bool

true when the observation is a Confirmed trend entry.

Trait Implementations

impl Clone for CanaryTrendObservation

fn clone(&self) -> CanaryTrendObservation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CanaryTrendObservation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CanaryTrendObservation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for CanaryTrendObservation

fn eq(&self, other: &CanaryTrendObservation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CanaryTrendObservation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CanaryTrendObservation