Module http_evidence 

Scope-bound HTTP collection for the decision runner.

Runtime scope

• Build: default via scanning.
• Execution: Surface B (metered executor for the decision runtime).
• Default termivar scan: yes, through StandardWebDecisionRuntime.
• Support: implemented and tested.

See docs/internals/runtime-map.md.

This executor performs one bounded discovery request and emits immutable, typed observations. It does not classify vulnerabilities, follow redirects, choose follow-up actions, or mutate the knowledge base directly.

Structs

HttpEvidenceExecutor

Real HTTP executor that produces typed evidence for the decision runner.

HttpEvidencePolicy

Scope, resource, and evidence policy applied to every HTTP probe.

HttpHeaderPayloadBinding

Binds a header-valued payload strategy to the HTTP evidence executor.

HttpProbe

One validated, bodyless discovery request.

SubjectHttpProbeProvider

Default provider that interprets endpoint:<absolute-url> subjects.

Enums

HttpBodyCapture

Response-body representation allowed to enter the knowledge base.

HttpEvidenceError

Configuration and execution failures for HTTP evidence collection.

HttpProbeMethod

Discovery-only HTTP methods supported by the evidence executor.

Constants

DEFAULT_HTTP_BODY_LIMIT

Default maximum number of response-body bytes read by one probe.

HTTP_EVIDENCE_EXECUTOR_ID

Stable executor identity used by the standard HTTP evidence collector.

MAX_HTTP_BODY_LIMIT

Hard guard preventing an individual evidence probe from buffering too much.

Traits

HttpProbeProvider

Host-owned mapping from a decision case to an HTTP discovery request.