Function compute_confidence

crates/openshell-sandbox/src/mechanistic_mapper.rs:261–282

Compute a confidence score (0.0 to 1.0) for a proposed rule.

(total_count: u32, port: u16, is_ssrf: bool)

/// Compute a confidence score (0.0 to 1.0) for a proposed rule.
fn compute_confidence(total_count: u32, port: u16, is_ssrf: bool) -> f32 {
    let mut score: f32 = 0.5;

    // Higher count → higher confidence (the denial is repeatable).
    if total_count >= 10 {
        score += 0.2;
    } else if total_count >= 3 {
        score += 0.1;
    }

    // Well-known port → higher confidence.
    if WELL_KNOWN_PORTS.iter().any(|(p, _)| *p == port) {
        score += 0.15;
    }

    // SSRF denials are lower confidence (may be legitimate blocking).
    if is_ssrf {
        score -= 0.2;
    }

    score.clamp(0.1, 0.95)
}

/// Generate security notes for a proposed rule.
fn generate_security_notes(host: &str, port: u16, is_ssrf: bool) -> String {