Struct DyoloChain 

pub struct DyoloChain {
    pub principal_pk: VerifyingKey,
    pub principal_scope: IntentHash,
    pub drift_tolerance_secs: u64,
    pub namespace: Option<String>,
    /* private fields */
}

Fields

principal_pk: VerifyingKey

principal_scope: IntentHash

drift_tolerance_secs: u64

namespace: Option<String>

Implementations

impl DyoloChain

pub fn new(principal_pk: VerifyingKey, principal_scope: IntentHash) -> Self

pub fn with_namespace(self, namespace: impl Into<String>) -> Self

Attach a namespace to this chain.

The effective scope root becomes a namespace-derived hash of the original principal_scope, cryptographically binding the chain to one tenant namespace. A cert issued for namespace “tenant-a” cannot authorize under namespace “tenant-b”.

Multi-tenancy

Use this when building a chain on behalf of a specific tenant. The human principal must compute the namespaced scope before issuing the first cert:

let chain = DyoloChain::new(pk, original_scope)
    .with_namespace("acme-corp");
let namespaced_scope = chain.principal_scope;
let cert = CertBuilder::new(agent_pk, namespaced_scope, now, expiry).sign(&human);
chain.push(cert);

pub fn with_drift_tolerance(self, secs: u64) -> Self

pub fn push(&mut self, cert: DelegationCert) -> &mut Self

pub fn len(&self) -> usize

pub fn is_empty(&self) -> bool

pub fn certs(&self) -> &[DelegationCert]

pub fn fingerprint(&self) -> [u8; 32]

pub fn authorize( &self, agent_pk: &VerifyingKey, intent: &IntentHash, proof: &MerkleProof, clock: &(dyn Clock + Send + Sync), revocation: &(dyn RevocationStore + Send + Sync), nonces: &(dyn NonceStore + Send + Sync), ) -> Result<AuthorizedAction, A1Error>

pub fn authorize_with_options( &self, agent_pk: &VerifyingKey, intent_h: &IntentHash, proof: &MerkleProof, clock: &(dyn Clock + Send + Sync), revocation: &(dyn RevocationStore + Send + Sync), nonces: &(dyn NonceStore + Send + Sync), policy: Option<&PolicySet>, sink: &dyn AuditSink, ) -> Result<AuthorizedAction, A1Error>

pub fn authorize_batch( &self, agent_pk: &VerifyingKey, intents: &[(IntentHash, MerkleProof)], clock: &(dyn Clock + Send + Sync), revocation: &(dyn RevocationStore + Send + Sync), nonces: &(dyn NonceStore + Send + Sync), ) -> BatchAuthorizeResult

pub async fn authorize_async( &self, agent_pk: &VerifyingKey, intent: &IntentHash, proof: &MerkleProof, clock: &(dyn Clock + Send + Sync), revocation: &(dyn AsyncRevocationStore + Send + Sync), nonces: &(dyn AsyncNonceStore + Send + Sync), ) -> Result<AuthorizedAction, A1Error>

Available on crate feature async only.

pub async fn authorize_async_with_options( &self, agent_pk: &VerifyingKey, intent_h: &IntentHash, proof: &MerkleProof, clock: &(dyn Clock + Send + Sync), revocation: &(dyn AsyncRevocationStore + Send + Sync), nonces: &(dyn AsyncNonceStore + Send + Sync), policy: Option<&PolicySet>, sink: &dyn AuditSink, ) -> Result<AuthorizedAction, A1Error>

Available on crate feature async only.

pub async fn authorize_batch_async( &self, agent_pk: &VerifyingKey, intents: &[(IntentHash, MerkleProof)], clock: &(dyn Clock + Send + Sync), revocation: &(dyn AsyncRevocationStore + Send + Sync), nonces: &(dyn AsyncNonceStore + Send + Sync), ) -> BatchAuthorizeResult

Available on crate feature async only.

Trait Implementations

impl Clone for DyoloChain

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'de> Deserialize<'de> for DyoloChain

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for DyoloChain

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.