test(performance): gate screener verdict latency

Author: SysAdminDoc

CHANGELOG.md

@@ -153,6 +153,8 @@ All notable changes to CallShield will be documented in this file.
 - Release artifacts now carry an exact CycloneDX SBOM, in-toto/SLSA provenance
   record, and SHA-256 sidecar bound to the release-runtime lockfile; version tags
   also receive a GitHub OIDC build-provenance attestation.
+- The screener hot path now has an executable 50 ms p99 JVM benchmark covering
+  the same verdict call used by the detection pipeline.
 
 ## v1.7.35 — 2026-08-10
 

app/src/test/java/com/sysadmindoc/callshield/data/HotPathBenchmarkTest.kt

@@ -112,6 +112,36 @@ class HotPathBenchmarkTest {
         )
     }
 
+    @Test
+    fun spamScreener_verdict_p99_stays_under_50ms() {
+        val numbers =
+            listOf(
+                "+12125551234",
+                "+18005551234",
+                "+19005551234",
+                "+15555555555",
+                "+13105550000",
+                "+16465551111",
+                "+17185559999",
+                "+14155551234",
+            )
+        repeat(200) { SpamMLScorer.verdict(numbers[it % numbers.size]) }
+
+        val elapsedNanos =
+            LongArray(1_000) { index ->
+                val start = System.nanoTime()
+                SpamMLScorer.verdict(numbers[index % numbers.size])
+                System.nanoTime() - start
+            }.sorted()
+        val p99 = elapsedNanos[(elapsedNanos.size * 99 / 100).coerceAtMost(elapsedNanos.lastIndex)]
+        val ceilingNanos = (50_000_000.0 * headroom).toLong()
+
+        assertTrue(
+            "Spam screener verdict p99 took ${p99 / 1_000_000.0}ms, ceiling ${ceilingNanos / 1_000_000.0}ms",
+            p99 < ceilingNanos,
+        )
+    }
+
     @Test
     fun spamHeuristics_pure_checks_1k_iterations_under_ceiling() {
         // Only hit the context-free heuristics so the test stays in pure JVM.