Forge module: per-firm face-detection vector store + similarity match over pgvector (HNSW cosine), consuming infrastructure-vision. Model-version-pinned matching + biometric tiered-retention columns (ADR 0020). Vectors stay in the firm DB (privilege-safe).
| Tier | application |
| Role | unclassified (baselined) |
| Path | crates/application/vision |
| Edition | 2021 |
| Targets | application_vision, pgvector_live |
| Public items | 7 across 0 modules |
| Tests | 2 |
What it is for
application-vision — per-firm face-detection vector store + similarity match, wired over infrastructure_vision. Schema (migrations/, pgvector), persistence (repo), and the ModuleIdentity mount point.
Privilege-safe by construction (ADR 0020): biometric vectors live in the firm's own data DB (db-per-tenant isolates firms), matching is scoped to a single model version (never cross-version), and unconfirmed detections carry an expires_at for the consumer's tiered-retention sweep. The consumer owns the opt-in/per-matter biometric policy — this module only stores + matches.
Capabilities
VisionModule
application-vision — per-firm face-detection vector store + similarity match,
| Item |
|---|
pub struct VisionModule |
VisionModule :: fn new() -> Self |
VisionModule :: fn name(& self) -> & 'static str |
VisionModule :: fn version(& self) -> & 'static str |
VisionModule :: fn migrations(& self) -> Vec <MigrationSet> |
VisionModule :: async fn migrate_pending(& self, pool : & PgPool) -> Result <u32, MigrationError> |
VisionModule :: fn permission_codes(& self) -> Vec <String> |
How to use it
No examples/ target and no doctest in this crate's rustdoc. The tests listed under Verification are the closest executable usage.
Module structure
No public modules: the crate root is its whole surface.
Public surface
`crate root`
| Item | What it is |
|---|---|
pub struct VisionModule | The mountable Forge module: owns the face_detections schema + permissions. |
VisionModule :: fn new() -> Self | Construct the module. |
VisionModule :: fn name(& self) -> & 'static str | — |
VisionModule :: fn version(& self) -> & 'static str | — |
VisionModule :: fn migrations(& self) -> Vec <MigrationSet> | — |
VisionModule :: async fn migrate_pending(& self, pool : & PgPool) -> Result <u32, MigrationError> | — |
VisionModule :: fn permission_codes(& self) -> Vec <String> | — |
Re-exports. Exported here, defined elsewhere.
| Export | Defined in |
|---|---|
{DetectedFace,FaceDetector,FaceEmbedder,FaceEmbedding,VisionError,} | infrastructure_vision::{DetectedFace,FaceDetector,FaceEmbedder,FaceEmbedding,VisionError,} |
{insert_detection,match_faces,purge_expired_unconfirmed,to_pgvector,FaceMatch,NewDetection,} | repo::{insert_detection,match_faces,purge_expired_unconfirmed,to_pgvector,FaceMatch,NewDetection,} |
Boundary
Reaches into infrastructure.
Shares tier application with 120 other crates: application-agreements, application-ai, application-analytics, application-approvals, application-assessments, application-audit-log, application-auth, application-billing, … (120 total).
_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._
Where it sits
| Tier (ontology) | application |
| Architectural role (taxonomy) | unclassified (baselined) |
| Location | crates/application/vision |
| Vocabulary in force (lexicon) | current |
Tier flow. Which tiers this crate's own edges cross.
flowchart LR n_application["application"] --> n_infrastructure["infrastructure"]
Dependencies
Runtime, in this workspace.
| Crate | Tier | Optional | Only on |
|---|---|---|---|
| `application-core` | application | no | always |
| `infrastructure-vision` | infrastructure | no | always |
Runtime, from outside the workspace.
| Crate | Requirement | Features | Optional | Only on |
|---|---|---|---|---|
async-trait | ^0.1 | — | no | always |
serde | ^1 | derive, derive | no | always |
sqlx | ^0.8 | runtime-tokio, postgres, chrono, uuid, json, migrate | no | always |
thiserror | ^2 | — | no | always |
uuid | ^1 | v4, v7, serde, js, v4, serde | no | always |
Development, from outside the workspace.
| Crate | Requirement | Features | Optional | Only on |
|---|---|---|---|---|
tokio | ^1 | full, macros, rt-multi-thread | no | always |
Build. None.
Depended on by. Nothing in this workspace.
Signal flow — what reaches this crate, and what it reaches.
flowchart LR SELF["application-vision"] SELF -->|runtime| n_application_core["application-core"] SELF -->|runtime| n_infrastructure_vision["infrastructure-vision"] classDef self fill:#1f883d,stroke:#1f883d,color:#fff; class SELF self;
Feature flags
No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.
Targets
| Kind | Name | Source |
|---|---|---|
| lib | application_vision | `src/lib.rs` |
| test | pgvector_live | `tests/pgvector_live.rs` |
Error model
No public error type was detected: no public item declares a type named *Error, and no public signature returns one.
Operational characteristics
| Property | Evidence |
|---|---|
| async public surface | yes |
| async runtime | none detected |
| database access | yes |
| network I/O | none detected |
| unsafe code | none detected |
| environment variables | yes |
No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.
Configuration
| Variable | Read in |
|---|---|
CARGO_PKG_VERSION | src/lib.rs |
Related capabilities
No workspace crate depends on this one.
Verification
| Kind | Count |
|---|---|
| Unit tests | 1 |
| Integration tests | 1 |
| Examples | 0 |
| Doctests | 0 |
Evidence by module. How often each public module is named by something executable.
| Module | Tests | Examples | Consumers |
|---|---|---|---|
crate root | 1 | 0 | 0 |
What the tests establish, by name:
match_is_model_scoped_ordered_and_firm_isolated—tests/pgvector_live.rsto_pgvector_formats_a_literal—src/repo.rs
Documentation coverage
| Measure | Documented | Total |
|---|---|---|
| Public items with rustdoc | 2 | 7 |
Public modules with a //! block | 0 | 0 |
pie showData
title Public items with rustdoc
"Documented" : 2
"No rustdoc detected" : 5
Metrics
| Metric | Value |
|---|---|
| Rust source files | 2 |
| Source lines | 225 |
| Code lines | 165 |
| Public API items | 7 |
| Public modules | 0 |
| Tests | 2 |
| Examples | 0 |
| Cargo features | 0 |
| Direct runtime dependencies | 7 |
| Workspace reverse dependencies | 0 |
pie showData
title Public API by kind
"method" : 6
"struct" : 1
pie showData
title Rust source composition
"Code" : 165
"Blank or comment" : 60
Generation
Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.