Skip to main content

ResolutionRule

Struct ResolutionRule 

Source
pub struct ResolutionRule {
    pub id: String,
    pub playbook_id: String,
    pub target_class: TargetClass,
    pub priority: u32,
    pub merge_strategy: MergeStrategy,
    pub description: String,
    pub min_confidence: f64,
    pub min_score: u32,
    pub require_unknown_vendor: bool,
    pub vendors: Vec<VendorRuleMatch>,
}
Expand description

Single codified rule mapping vendor patterns to a playbook.

Rules are ordered by priority (lower numbers win). When two rules both match a crate::vendor_classifier::VendorClassification the resolver picks the lowest-priority rule, then applies its merge_strategy to combine any remaining rules into a single decision.

§Example

use stygian_charon::vendor_resolver::{MergeStrategy, ResolutionRule, VendorRuleMatch};
use stygian_charon::types::TargetClass;
use stygian_charon::vendor_classifier::VendorId;

let rule = ResolutionRule {
    id: "tier2-hostile".to_string(),
    playbook_id: "tier2-hostile".to_string(),
    target_class: TargetClass::HighSecurity,
    priority: 0,
    merge_strategy: MergeStrategy::StrongestVendor,
    description: "Hostile anti-bot vendors".to_string(),
    min_confidence: 0.60,
    min_score: 5,
    require_unknown_vendor: false,
    vendors: vec![VendorRuleMatch {
        vendor: VendorId::DataDome,
        weight: 10,
    }],
};
assert!(rule.validate().is_ok());

Fields§

§id: String

Stable rule id ("tier2-hostile", "tier1-js-cloudflare", etc.). Required, non-empty, unique within a resolver bundle.

§playbook_id: String

Playbook id the rule resolves to. Empty string means the Manual strategy marker should be returned instead.

§target_class: TargetClass

Target class the resolved playbook maps to.

§priority: u32

Priority (lower wins). The baseline rules use 0 (tier2-hostile), 10 (tier1-js-cloudflare), 100 (tier1-static), and 1000 (default-manual).

§merge_strategy: MergeStrategy

Merge strategy used when this rule fires alongside other matching rules.

§description: String

Human-readable description for operator logs.

§min_confidence: f64

Minimum classifier confidence the top vendor must cross for the rule to fire. Must be in [0.0, 1.0].

§min_score: u32

Minimum classifier score the top vendor must reach for the rule to fire. Must be > 0 (or 0 for the catch-all default-manual rule).

§require_unknown_vendor: bool

When true, the rule only fires when the classifier reports VendorId::Unknown. Used by the tier1-static rule so benign unknown classifications do not accidentally swallow single-signal low-confidence matches.

§vendors: Vec<VendorRuleMatch>

Vendors that trigger the rule.

Implementations§

Source§

impl ResolutionRule

Source

pub fn validate(&self) -> Result<(), VendorResolverError>

Validate the rule’s internal consistency. Reports the first failing field with a structured error that includes both the rule id and the field path.

§Errors

Returns VendorResolverError on the first inconsistency. The error embeds the rule id, the field path, and the bad value so operators can locate the offending TOML line without re-running the loader.

Source

pub fn vendors_by_id(&self) -> BTreeMap<VendorId, &VendorRuleMatch>

Vendor list indexed by VendorId for fast lookup.

Trait Implementations§

Source§

impl Clone for ResolutionRule

Source§

fn clone(&self) -> ResolutionRule

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for ResolutionRule

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<'de> Deserialize<'de> for ResolutionRule

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl PartialEq for ResolutionRule

Source§

fn eq(&self, other: &ResolutionRule) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Serialize for ResolutionRule

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl StructuralPartialEq for ResolutionRule

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T> PolicyExt for T
where T: ?Sized,

§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more
§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,