operational_autopilot

Cross-surface operational autopilot and SLO-aware controls (M54).

Types

Control

Bounded automated control action.

pub type Control {
  ShedRuntimeEvents(percent: Int)
  ThrottleTransport(max_events_per_sec: Int)
  IsolateTenant(tenant_id: String)
  PauseEtlPipelines
}

Constructors

```
ShedRuntimeEvents(percent: Int)
```

ThrottleTransport(max_events_per_sec: Int)

```
IsolateTenant(tenant_id: String)
```
```
PauseEtlPipelines
```

ControlAction

Auditable control action evidence.

pub type ControlAction {
  ControlAction(
    surface: Surface,
    control: Control,
    decision: Decision,
    reason: String,
    detected_at_ms: Int,
    applied_at_ms: Int,
    recovered_at_ms: Int,
    reversible: Bool,
  )
}

Constructors

ControlAction(
  surface: Surface,
  control: Control,
  decision: Decision,
  reason: String,
  detected_at_ms: Int,
  applied_at_ms: Int,
  recovered_at_ms: Int,
  reversible: Bool,
)

Correlation

Cross-surface incident correlation evidence.

pub type Correlation {
  Correlation(
    incident_id: String,
    surface: Surface,
    trace_ref: String,
    detected_at_ms: Int,
    mitigated_at_ms: Int,
    recovered_at_ms: Int,
  )
}

Constructors

Correlation(
  incident_id: String,
  surface: Surface,
  trace_ref: String,
  detected_at_ms: Int,
  mitigated_at_ms: Int,
  recovered_at_ms: Int,
)

Decision

Autopilot decision for one control action.

pub type Decision {
  Applied
  RequiresOverride(override_id: String)
  BlockedByPolicy(reason: String)
  RolledBack
}

Constructors

```
Applied
```
```
RequiresOverride(override_id: String)
```
```
BlockedByPolicy(reason: String)
```
```
RolledBack
```

DrillResult

Deterministic autopilot drill result.

pub type DrillResult {
  DrillResult(
    scenario: DrillScenario,
    surface: Surface,
    status: slo_autopilot.Status,
    baseline_detection_ms: Int,
    autopilot_detection_ms: Int,
    baseline_mitigation_ms: Int,
    autopilot_mitigation_ms: Int,
    actions: List(ControlAction),
    correlation: Correlation,
  )
}

Constructors

DrillResult(
  scenario: DrillScenario,
  surface: Surface,
  status: slo_autopilot.Status,
  baseline_detection_ms: Int,
  autopilot_detection_ms: Int,
  baseline_mitigation_ms: Int,
  autopilot_mitigation_ms: Int,
  actions: List(ControlAction),
  correlation: Correlation,
)

DrillScenario

Deterministic M54 drill scenario.

pub type DrillScenario {
  RuntimeLatencySpike
  TransportAckStorm
  TenantHotspotIsolation
  EtlReplayLag
}

Constructors

```
RuntimeLatencySpike
```
```
TransportAckStorm
```
```
TenantHotspotIsolation
```
```
EtlReplayLag
```

OverridePolicy

Operator override and automation policy.

pub type OverridePolicy {
  OverridePolicy(
    name: String,
    allow_runtime: Bool,
    allow_transport: Bool,
    allow_tenant: Bool,
    allow_etl: Bool,
    require_operator_override: Bool,
    max_actions_per_incident: Int,
  )
}

Constructors

OverridePolicy(
  name: String,
  allow_runtime: Bool,
  allow_transport: Bool,
  allow_tenant: Bool,
  allow_etl: Bool,
  require_operator_override: Bool,
  max_actions_per_incident: Int,
)

Surface

Runtime surface controlled by the operational autopilot.

pub type Surface {
  RuntimeSurface
  TransportSurface
  TenantSurface
  EtlSurface
}

Constructors

```
RuntimeSurface
```
```
TransportSurface
```
```
TenantSurface
```
```
EtlSurface
```

Values

action_count

pub fn action_count(result: DrillResult) -> Int

Count actions in a drill result.

action_label

pub fn action_label(action: ControlAction) -> String

Control action label.

actions

pub fn actions(result: DrillResult) -> List(ControlAction)

Drill actions accessor.

actions_auditable

pub fn actions_auditable(result: DrillResult) -> Bool

True when every action is auditable and bounded by explicit policy outcomes.

actions_bounded

pub fn actions_bounded(
  result: DrillResult,
  policy: OverridePolicy,
) -> Bool

True when actions are bounded by policy and not silently unbounded.

actions_reversible

pub fn actions_reversible(result: DrillResult) -> Bool

True when every emitted action is reversible.

all_drills_valid

pub fn all_drills_valid(
  results: List(DrillResult),
  policy: OverridePolicy,
) -> Bool

True when every drill passes the same certification criteria.

audit_metric

pub fn audit_metric(action: ControlAction) -> telemetry.Metric

Telemetry metric for one autopilot action.

blocked_by_policy

pub fn blocked_by_policy(action: ControlAction) -> Bool

True when a control action was blocked by policy.

blocked_policy

pub fn blocked_policy() -> OverridePolicy

Blocked policy used by tests and operators to verify policy bounds.

control_label

pub fn control_label(control: Control) -> String

Control label.

correlation

pub fn correlation(result: DrillResult) -> Correlation

Drill correlation accessor.

correlation_label

pub fn correlation_label(correlation: Correlation) -> String

Correlation label for incident triage.

decision_label

pub fn decision_label(decision: Decision) -> String

Decision label.

default_policy

pub fn default_policy() -> OverridePolicy

Default policy allows bounded automation on every M54 surface.

drill_result_signature

pub fn drill_result_signature(result: DrillResult) -> String

Stable drill result signature.

drill_result_valid

pub fn drill_result_valid(
  result: DrillResult,
  policy: OverridePolicy,
) -> Bool

True when a drill has acceptable certification evidence.

drill_scenario_label

pub fn drill_scenario_label(scenario: DrillScenario) -> String

Drill scenario label.

latency_reduced

pub fn latency_reduced(result: DrillResult) -> Bool

True when autopilot detection and mitigation beat the manual baseline.

policy_label

pub fn policy_label(policy: OverridePolicy) -> String

Override policy label.

recovery_latency_ms

pub fn recovery_latency_ms(result: DrillResult) -> Int

Recovery latency measured from detection to recovery.

requires_override

pub fn requires_override(action: ControlAction) -> Bool

True when a control action requested explicit operator override.

run_default_drills

pub fn run_default_drills() -> List(DrillResult)

Run all default M54 drills.

run_drill

pub fn run_drill(
  scenario: DrillScenario,
  policy: OverridePolicy,
) -> DrillResult

Run one deterministic M54 drill.

strict_policy

pub fn strict_policy() -> OverridePolicy

Strict policy requires explicit override semantics for high-impact controls.

surface_label

pub fn surface_label(surface: Surface) -> String

Surface label.