rogue_machines 0.1.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 1f287ac34cb1902fa6f38bc699d4ebb9771187ca55bd2ca7677dee75f8da2a67
+  data.tar.gz: f4f1ae7a1ed9eb00bc352f7089aac1b6b34b1728e8800680edad99f715dc7b88
+SHA512:
+  metadata.gz: f10f9af0ca3c6143e9e46ad0b30387f437fb23195378e8aef054ff7f15892628c1559da5e4a17de7da8097e242ef4e49f3c595351795949841a3fa514a719d21
+  data.tar.gz: 3ef750f424079c48a3d531bd0aae538025d12984e60378c1bccd08b5cd93a62175d1f00b21135dc29f2cdfca6069a6119de4feff2d335b5d43acc813d414fac7

data/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## [0.1.1](https://github.com/seuros/rogue_machines/compare/rogue_machines-v0.1.0...rogue_machines/v0.1.1) (2026-11-01)
+
+
+### Features
+
+* fault injection, disarmed by default, with an expiry it cannot outlive ([e6cfe89](https://github.com/seuros/rogue_machines/commit/e6cfe8999947dbfb048eaf15a13cb2d4dbb03943))
+* pass a rubygems OTP through the environment ([4f60306](https://github.com/seuros/rogue_machines/commit/4f60306bf35aa8fc7336432c0cdd13b61004796b))
+
+
+### Bug Fixes
+
+* collect the built gems whatever depth the download puts them at ([a470d97](https://github.com/seuros/rogue_machines/commit/a470d97586dad75365425ff5fdde68a982863262))
+* the release tag carries the gem name, and the gate uses the aggregate output ([1c980cd](https://github.com/seuros/rogue_machines/commit/1c980cd0a36bdce2913e1a74252f90987183f0f7))

data/Cargo.lock

@@ -0,0 +1,286 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.72.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags",
+ "cexpr",
+ "clang-sys",
+ "itertools",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash",
+ "shlex",
+ "syn",
+]
+
+[[package]]
+name = "bitflags"
+version = "2.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"
+
+[[package]]
+name = "cexpr"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"
+
+[[package]]
+name = "clang-sys"
+version = "1.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "157a8ba7b480713b56f4c09fd13fc3e0a22a5dfab8097ba61cbc5feef950788a"
+dependencies = [
+ "glob",
+ "libc",
+ "libloading",
+]
+
+[[package]]
+name = "either"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e9c71c2167ca323c882b99918929403426e2373ea17242ff5653e0d5e1058be"
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "itertools"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20870f649af7073d53e38067b2a84312175d56ea15217e1b15bc83506ec50afb"
+
+[[package]]
+name = "libc"
+version = "0.2.191"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if",
+ "windows-link",
+]
+
+[[package]]
+name = "magnus"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40ef424404d166cbb71c8b8d19c9c589c748c4547c1afa1928c5504299f6c713"
+dependencies = [
+ "magnus-macros",
+ "rb-sys",
+ "rb-sys-env",
+ "seq-macro",
+]
+
+[[package]]
+name = "magnus-macros"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9dafde2eeb66f090e0f326112323eb8324b12cb32b5d1210e541d3df6b0ce77e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "rb-sys"
+version = "0.9.130"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02faf625bb10ba893e3ae620f19c9fb1b5f8fcae0fe4eb86bb3f2230fad75edb"
+dependencies = [
+ "rb-sys-build",
+]
+
+[[package]]
+name = "rb-sys-build"
+version = "0.9.130"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05be6f9c86fe5482808162826f6c047d093b3670582296c770de1d94f8066694"
+dependencies = [
+ "bindgen",
+ "lazy_static",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "shell-words",
+ "syn",
+]
+
+[[package]]
+name = "rb-sys-env"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cca7ad6a7e21e72151d56fe2495a259b5670e204c3adac41ee7ef676ea08117a"
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "rogue-machines"
+version = "0.2.0"
+
+[[package]]
+name = "rogue_machines_native"
+version = "0.1.1"
+dependencies = [
+ "magnus",
+ "rogue-machines",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
+
+[[package]]
+name = "seq-macro"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bc711410fbe7399f390ca1c3b60ad0f53f80e95c5eb935e52268a0e2cd49acc"
+
+[[package]]
+name = "shell-words"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fe69c597f9c37bfeeeeeb33da3530379845f10be461a66d16d03eca2ded77"
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"

data/Cargo.toml

@@ -0,0 +1,24 @@
+[workspace]
+members = ["ext/rogue_machines_native/core", "ext/rogue_machines_native/ffi"]
+resolver = "3"
+
+[workspace.package]
+edition = "2024"
+rust-version = "1.99"
+
+[workspace.dependencies]
+rogue-machines = { path = "ext/rogue_machines_native/core" }
+
+[workspace.lints.rust]
+unsafe_code = "forbid"
+unused_must_use = "warn"
+
+[workspace.lints.clippy]
+all = { level = "warn", priority = -1 }
+pedantic = { level = "warn", priority = -1 }
+nursery = { level = "warn", priority = -1 }
+expect_used = "deny"
+unwrap_used = "deny"
+uninlined_format_args = "deny"
+needless_borrow = "deny"
+redundant_clone = "deny"

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2025 Abdelkader Boudih
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,211 @@
+# RogueMachines 💥
+
+> **Controlled sabotage for the fleet.** The ship that breaks your systems on
+> purpose, so the void doesn't get to do it first.
+
+Every other vessel in this fleet exists to survive a failure. None of them can
+produce one. A breaker that has never opened, a retry budget that has never
+been spent and a deadline that has never been hit are three untested claims
+flying in formation. **AMS Gray** arms the failure that tests them.
+
+---
+
+## 🚀 Launch Sequence
+
+```bash
+# Add to your ship's Gemfile
+gem 'rogue_machines'
+```
+
+Requires **Ruby 4.0+** and a Rust toolchain, or a platform gem.
+
+---
+
+## 🎯 Mission Brief
+
+```ruby
+require 'rogue_machines'
+
+RogueMachines.arm(:payments, fault: :raise, share: 0.01, expires_in: 300)
+
+RogueMachines.run(:payments) do
+  Payments.charge(order)
+end
+```
+
+One call in a hundred now fails for the next five minutes, and the breaker
+wrapped around it finally gets to prove it works.
+
+---
+
+## 🛡️ Safety Interlocks
+
+**Weapons are cold until you arm them.** A process that has armed nothing
+injects nothing, and `run` says so by validating the name and reading one word
+through one native call.
+
+```ruby
+RogueMachines.armed?                                      # => false
+RogueMachines.run(:payments) { Payments.charge(order) }   # the real call
+```
+
+It allocates nothing: zero objects per call for a Symbol, a String or a frozen
+String name. The overhead is about 160 ns, most of it the name check rather
+than the native read. That is why this ships as a runtime dependency rather
+than a test-only one. The interlock sits on every call to every protected
+dependency, so it has to be cheap enough to leave in.
+
+Nothing is armed by loading the gem, by an environment variable or by a config
+file. Arming is an explicit call naming a target and a share of traffic.
+
+---
+
+## ⏱️ Every Experiment Self-Destructs
+
+`expires_in:` is **required**. There is no way to arm an experiment that
+outlives the officer who armed it, and no constructor in the Rust core that
+takes a fault without a reading it expires at.
+
+```ruby
+RogueMachines.arm(:payments, fault: :raise, share: 1.0, expires_in: 60)
+RogueMachines.armed             # => [:payments]
+
+# sixty seconds later, with nobody touching anything
+RogueMachines.armed             # => []
+RogueMachines.armed?            # => false
+```
+
+An expiry is **observed, not scheduled**: nothing retires an experiment until
+something takes a reading. The first `run`, `armed` or `armed?` at or after the
+expiry retires it, and once retired a clock that steps backwards cannot bring
+it back.
+
+An experiment lasts at most twenty-four hours. Past that it is configuration,
+not an experiment, and it must be armed again deliberately.
+
+---
+
+## 💥 The Armory
+
+```ruby
+# Fail.
+RogueMachines.arm(:payments, fault: :raise, share: 0.01, expires_in: 300)
+
+# Be slow, then make the real call.
+RogueMachines.arm(:search, fault: :delay, delay: 2, share: 0.5, expires_in: 300)
+
+# Succeed, with a substitute.
+RogueMachines.arm(:catalogue, fault: :garble, garbled: [], share: 0.1, expires_in: 300)
+```
+
+A `:raise` raises `RogueMachines::Injected`. A `:garble` returns `garbled:`
+without running the block, which defaults to `nil` so a forgotten substitute
+cannot quietly return the real value.
+
+**There is no weapon that holds a caller forever.** A dependency that times out
+is a `:delay` longer than the caller's own budget, which leaves the caller's
+timeout in charge of when it gives up. The delay is spent against the ambient
+`deadline_machines` budget, so a stall inside a deadline trips that deadline
+instead of sleeping past it. Because a deadline is opt-in per call site, a
+delay is also capped at five minutes. That is not a substitute for a deadline;
+it bounds what a mistyped argument can do to a caller that has none.
+
+---
+
+## 🎲 Targeting
+
+`share:` is a fraction of calls between 0 and 1, and the draw deciding each
+call comes from `RogueMachines.random`. Replace it to replay an exact run:
+
+```ruby
+RogueMachines.random = Random.new(1234)
+```
+
+A share is half open at its own boundary and expressed in millionths, so 0.0
+reaches nothing and 1.0 reaches everything. It is a threshold from zero rather
+than an interval: 0.1 and 0.9 both cover a low draw, so two experiments cannot
+divide one stream of calls between them. A share below one millionth is
+refused rather than armed as a silent no-op.
+
+---
+
+## 🕰️ The Ship's Chronometer
+
+`RogueMachines.clock` delegates to `DeadlineMachines.clock`, so a test can
+expire an experiment without sleeping:
+
+```ruby
+RogueMachines.clock = DeadlineMachines::TestClock.new
+RogueMachines.arm(:payments, fault: :raise, share: 1.0, expires_in: 60)
+RogueMachines.clock.advance(60)
+RogueMachines.armed?            # => false
+```
+
+This is the one place `RogueMachines` consumes a primitive from the fleet
+rather than tripping it.
+
+**Install the chronometer through `RogueMachines.clock=`.** Doing so disarms
+everything first, because every armed expiry was computed against the outgoing
+clock and an expiry is only meaningful against the clock it came from.
+
+It is safe to do under load. A reading is taken before any lock, so that a
+caller's clock never runs inside one, which means a call can be part way
+through when the clock is replaced. Each reading therefore carries the
+generation it belongs to, and a call arriving with a superseded one is refused
+rather than acted on: arming raises and nothing is armed, a decision makes the
+real call, and a query reports nothing. A clock being replaced faster than a
+reading can be taken is answered the same way rather than retried forever, and
+a clock returning something that is not a non-negative Integer of nanoseconds
+raises an error naming the clock.
+
+Replacing `DeadlineMachines.clock` underneath is reflected, since the
+delegation is not memoised, but it cannot disarm anything. A clock whose epoch
+is lower than the old one then makes an armed experiment look as though its
+expiry is still far away. Set `RogueMachines.clock` and the question does not
+arise.
+
+A reading is also taken before the lock when arming, so the expiry of a new
+experiment is measured from slightly before it is armed. With a real monotonic
+clock that is microseconds. Nothing infers that a reading came from a
+different clock: with several threads taking their own readings, a reading
+older than the arming is ordinary interleaving, and treating it as evidence of
+a clock change retires experiments that were just armed.
+
+---
+
+## 🔩 The Native Extension Is Required
+
+There is no pure-Ruby fallback and no switch to turn one on. `require
+'rogue_machines'` loads the extension and fails if it is not there. The gem is
+a binding to the `rogue-machines` crate in `ext/rogue_machines_native/core`,
+which has zero dependencies and builds `no_std` for wasm and for a
+microcontroller. The binding asks for its `std` feature, so the crate as this
+gem consumes it is not `no_std`.
+
+---
+
+## 🚫 Rules of Engagement
+
+- **No breaker, limiter, retry or budget.** It trips those. `breaker_machines`,
+  `throttle_machines`, `chrono_machines` and `shed_machines` own them.
+- **No clock of its own.** Every reading is nanoseconds the caller passes in,
+  which is why the core builds for bare metal.
+- **No randomness of its own.** The draw is the caller's.
+- **No capacity beyond 32 experiments**, because the armed set is one 32-bit
+  word and the interlock on the hot path is a single load of it.
+
+---
+
+## 📡 Credits
+
+**AMS Gray**, NCC-0401, *Gray*-class raider.
+
+Named for Jim Gray's *Why Do Computers Stop and What Can Be Done About It?*
+(1985), which argued that the way to find out whether a system tolerates
+faults is to give it some.
+
+---
+
+## License
+
+MIT

data/ext/rogue_machines_native/core/Cargo.toml

@@ -0,0 +1,24 @@
+[package]
+name = "rogue-machines"
+version = "0.2.0"
+edition.workspace = true
+rust-version.workspace = true
+authors = ["Abdelkader Boudih <oss@seuros.com>"]
+license = "MIT"
+description = "Fault injection for chaos engineering - armed experiments that make a dependency fail, stall or lie, no_std with zero dependencies"
+repository = "https://github.com/seuros/rogue_machines"
+keywords = ["fault-injection", "chaos-engineering", "resilience", "testing", "no-std"]
+categories = ["no-std", "development-tools::testing"]
+readme = "README.md"
+
+[lib]
+name = "rogue_machines"
+crate-type = ["lib"]
+
+[features]
+default = ["std"]
+std = ["alloc"]
+alloc = []
+
+[lints]
+workspace = true

data/ext/rogue_machines_native/core/src/armed.rs

@@ -0,0 +1,78 @@
+//! Which slots are armed, in one word.
+
+use core::sync::atomic::{AtomicU32, Ordering};
+
+use crate::EXPERIMENTS;
+
+/// A slot index a [`Rogue`](crate::Rogue) can hold.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
+pub struct Slot(usize);
+
+impl Slot {
+    /// Rejects an index at or above [`EXPERIMENTS`].
+    #[must_use]
+    pub const fn new(index: usize) -> Option<Self> {
+        if index < EXPERIMENTS {
+            Some(Self(index))
+        } else {
+            None
+        }
+    }
+
+    #[must_use]
+    pub const fn index(self) -> usize {
+        self.0
+    }
+
+    const fn bit(self) -> u32 {
+        1_u32 << self.0
+    }
+}
+
+/// One bit per slot, read on every protected call and written only when an
+/// experiment is armed, disarmed or found expired.
+///
+/// Every operation is `Relaxed`. That is sufficient only because the
+/// experiment table is written behind `&mut self`, so the mask never has to
+/// publish it. Giving `Rogue::arm` interior mutability would break that.
+#[derive(Debug, Default)]
+pub struct Armed(AtomicU32);
+
+impl Armed {
+    #[must_use]
+    pub const fn new() -> Self {
+        Self(AtomicU32::new(0))
+    }
+
+    /// Whether any slot is armed.
+    #[must_use]
+    pub fn any(&self) -> bool {
+        self.0.load(Ordering::Relaxed) != 0
+    }
+
+    #[must_use]
+    pub fn holds(&self, slot: Slot) -> bool {
+        self.0.load(Ordering::Relaxed) & slot.bit() != 0
+    }
+
+    pub fn hold(&self, slot: Slot) {
+        self.0.fetch_or(slot.bit(), Ordering::Relaxed);
+    }
+
+    pub fn release(&self, slot: Slot) {
+        self.0.fetch_and(!slot.bit(), Ordering::Relaxed);
+    }
+
+    pub fn release_all(&self) {
+        self.0.store(0, Ordering::Relaxed);
+    }
+
+    /// How many slots are armed.
+    #[must_use]
+    pub fn count(&self) -> u32 {
+        self.0.load(Ordering::Relaxed).count_ones()
+    }
+}
+
+#[cfg(test)]
+mod tests;