Struct CertExtensions 

pub struct CertExtensions { /* private fields */ }

Available on crate feature wire only.

Typed extension fields committed into a DelegationCert signature.

Extensions augment the minimal cert payload with business-level metadata without breaking the cryptographic invariants of the core fields. The extension map is canonically serialized and hashed before inclusion in signable_bytes, so a tampered extension causes signature verification to fail.

Reserved namespaces

dyolo.* is reserved for protocol extensions. Applications should use their own reverse-DNS prefix, e.g. acme.cost_center.

Well-known keys

Key	Type	Meaning
dyolo.rate_limit_rpm	u64	Max requests per minute for the delegate
dyolo.quota_tokens	u64	Max LLM tokens the delegate may consume
dyolo.geo_allow	[String]	ISO-3166-1 alpha-2 country codes allowed
dyolo.cost_center	String	Billing cost-center tag for audit
dyolo.ttl_warn_sec	u64	Alert threshold before expiry

Implementations

impl CertExtensions

pub fn new() -> Self

Create an empty extension map.

pub fn set(self, key: impl Into<String>, value: impl Into<ExtValue>) -> Self

Set an extension field. Returns self for chaining. Panics if the size limit is exceeded. Prefer set_checked for safety.

pub fn set_checked( self, key: impl Into<String>, value: impl Into<ExtValue>, ) -> Result<Self, A1Error>

Set an extension field with size validation.

Keys must be non-empty. Use a reverse-DNS prefix for application-specific keys (e.g. acme.cost_center). The dyolo.* namespace is reserved for well-known protocol keys (dyolo.rate_limit_rpm, dyolo.quota_tokens, dyolo.geo_allow, dyolo.cost_center, dyolo.ttl_warn_sec).

pub fn get(&self, key: &str) -> Option<&ExtValue>

Get an extension field by key.

pub fn is_empty(&self) -> bool

Returns true if no extension fields are set.

pub fn iter(&self) -> impl Iterator<Item = (&String, &ExtValue)>

pub fn commitment(&self) -> [u8; 32]

A deterministic 32-byte commitment over all extension fields.

Trait Implementations

impl Clone for CertExtensions

fn clone(&self) -> CertExtensions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertExtensions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CertExtensions

fn default() -> CertExtensions

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CertExtensions

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CertExtensions

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.