verifier

type Config struct {
	// Enabled controls whether verification is performed at all.
	Enabled bool

	// Timeout is the maximum duration for a single verification request.
	Timeout time.Duration

	// Concurrency is the number of concurrent verification workers.
	Concurrency int

	// RateLimit is the maximum verification requests per second.
	//
	// The rate applies both as a per-detector budget (each distinct detector ID
	// gets its own limiter of this rate) and as a global ceiling shared across
	// all providers, so one high-volume detector type cannot starve the
	// verification of unrelated findings in the same run.
	RateLimit float64
}

type Engine struct {
	// contains filtered or unexported fields
}

type Verifier interface {
	// Type returns the detector ID this verifier handles.
	// It must match the corresponding Detector.ID() value.
	Type() string

	// Verify checks if the detected secret is valid/active.
	// It may make network calls, so the context must be respected for cancellation.
	Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult
}

type VerifyPair struct {
	Finding finding.Finding
	Raw     detector.RawFinding
}