codex-rs/protocol/src/security_risk.rs

use chrono::DateTime;
use chrono::Utc;
use schemars::JsonSchema;
use serde::Deserialize;
use serde::Serialize;
use std::collections::BTreeMap;

/// A thread-owned, in-memory snapshot of security risk classifier scores.
///
/// Scores must not enter model-visible conversation context or user-visible thread
/// item projections.
#[derive(Clone, Debug, PartialEq, Serialize, Deserialize, JsonSchema)]
pub struct SecurityRiskScore {
    pub scores: BTreeMap<String, f64>,
    /// The tool call whose action produced this score, when available.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub call_id: Option<String>,
    /// The bounded tool action that was reviewed to produce this score.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub action: Option<serde_json::Value>,
    /// When sampling started, if this snapshot was written by a timestamp-aware client.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    #[schemars(with = "Option<String>")]
    pub sampled_at: Option<DateTime<Utc>>,
}