Combinator that limits the privacy loss of an odometer.
Details
Adjusts the queryable returned by the odometer to reject any query that would increase the total privacy loss above the privacy guarantee of the mechanism.
Required features: contrib
make_privacy_filter in Rust documentation.
Supporting Elements:
Input Domain:
DI
Output Type:
MI
Input Metric:
MO
Output Measure:
OdometerQueryable<Q, A, MI::Distance, MO::Distance>
Proof Definition: