Method CreateProtectionEvent

internal/identity/screening.go:66–84

CreateProtectionEvent appends a screening event. The insert is idempotent on the primary key: callers that set a DeterministicProtectionEventID get exactly-once recording across retries. If ev.ID is empty a random id is assigned. A conflicting id is a no-op (returns nil).

(ctx context.Context, ev ProtectionEvent)

// recording across retries. If ev.ID is empty a random id is assigned. A conflicting
// id is a no-op (returns nil).
func (s *Store) CreateProtectionEvent(ctx context.Context, ev ProtectionEvent) error {
	if ev.ID == "" {
		ev.ID = NewProtectionEventID()
	}
	_, err := s.pool.Exec(ctx,
		`INSERT INTO protection_events
		    (id, message_id, agent_id, direction, source, reason, action,
		     subject_addr, detector, score, categories, spans, raw)
		 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13)
		 ON CONFLICT (id) DO NOTHING`,
		ev.ID, ev.MessageID, ev.AgentID, ev.Direction, ev.Source, ev.Reason, ev.Action,
		nullString(ev.SubjectAddr), nullString(ev.Detector), ev.Score,
		nullJSON(ev.Categories), nullJSON(ev.Spans), nullJSON(ev.Raw),
	)
	if err != nil {
		return fmt.Errorf("create screening event: %w", err)
	}
	return nil
}

// ListProtectionEventsByMessage returns every screening event recorded against a
// message, newest first — the breakdown a reviewer sees for a held item.