Module projection 

Projection of observed defense state into provenance-carrying evidence.

This adapter reuses the existing observation contracts — DefenseState, DefenseTransition, and the fingerprint types — and projects them into immutable termivar_core::Evidence records that a knowledge store can retain with full provenance. It is deliberately projection-only:

• it produces evidence (observations), never a termivar_core::Fact or hypothesis, so a single block never becomes a “confirmed WAF” claim;
• it derives from an actual response only — a timeout or connection failure has no DefenseState, so it is never learned as a defense signal;
• it selects no payload, issues no request, and reads no clock or randomness: identity and timestamp come from the caller’s context, so the projection is a pure, deterministic, idempotent function of its inputs.

Callers ingest the result through the existing KnowledgeBase::insert_evidence_batch; this module does not touch the store, the planner, the executor, or any runtime configuration.

Structs

DefenseObservationContext

Immutable provenance a projected defense observation is stamped with.

Enums

ObservedOutcome

The outcome of one execution turn, from the projection’s point of view.

Functions

project_defense_state

Projects one observed defense state into provenance-carrying evidence.

project_defense_transition

Projects one control-to-candidate transition into defense evidence.

project_outcome

Projects one execution outcome into defense evidence.