Skip to content

rules: allow per-rule confidence #35

Description

@eitamring

rules always come out with confidence 1.0, so a gate after the rules stage never escalates anything - escalation only happens on no match. for the demo i want weak rules (data_exfil style heuristics at ~0.7) that get pushed to the next stage when the gate is raised.

probably an optional confidence field on a rule, default 1.0, validated to [0,1]. the doc comments that say deterministic stages emit 1 need updating too (record.go, gate.go).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions