Struct AuditState 

pub struct AuditState {
    pub halted: AtomicBool,
    pub violation_count: AtomicU32,
    /* private fields */
}

Shared audit state (overflow flag, alarm counter).

Lives in AppState and survives the lifetime of the server process. Callers pass the database pool explicitly so the same state can be used from any async context.

Fields

halted: AtomicBool

When true, EST operations MUST be rejected (FAU_STG.4 halt).

violation_count: AtomicU32

Rolling count of consecutive security violations. Reset to 0 after a successful authentication.

Implementations

impl AuditState

pub fn new() -> Self

Create a new audit state with no violations and not halted.

pub fn with_config(config: AuditConfig) -> Self

Build audit state from the [audit] config with the unkeyed (SHA-256) hash chain. Equivalent to from_config with no key.

pub fn from_config(config: AuditConfig, integrity_key: Option<Vec<u8>>) -> Self

Build audit state from the [audit] config plus a resolved integrity key (present only when signed = true). With a key the hash chain is HMAC-SHA256 keyed; without one it is plain SHA-256.

pub fn is_halted(&self) -> bool

Check whether EST operations should be rejected due to audit storage exhaustion (FAU_STG.4).

pub fn set_halted(&self, halted: bool)

Set the halted flag (called when audit storage is full and overflow policy is halt).

pub fn record_violation(&self) -> u32

Increment the security violation counter and return the new count.

pub fn reset_violations(&self)

Reset the violation counter (called after successful authentication).

Trait Implementations

impl Default for AuditState

fn default() -> Self

Returns the “default value” for a type.