Struct ProvenanceRoot 

pub struct ProvenanceRoot {
    pub step_count: u32,
    pub merkle_root: [u8; 32],
    pub trace_id: [u8; 16],
    pub started_at_unix: u64,
    pub finalized_at_unix: u64,
    pub chain_binding: [u8; 32],
}

A compact cryptographic commitment to a complete reasoning trace.

ProvenanceRoot is the value stored in a ProvableReceipt. It binds the receipt to the specific sequence of reasoning steps that led to the authorized action, without storing the steps themselves.

Selective Disclosure

An auditor can request disclosure of individual steps. The agent provides the original step content plus a ProvenanceStepProof, which the auditor verifies against the merkle_root stored in the archived receipt.

Reconstruction

Given the archived ProvableReceipt (containing ProvenanceRoot) and the original step contents, any party can independently verify the complete reasoning trace. No secrets are required.

Fields

step_count: u32

Total number of recorded reasoning steps.

merkle_root: [u8; 32]

Merkle root over all reasoning step leaf hashes.

trace_id: [u8; 16]

Random nonce identifying this trace instance.

Prevents two traces with identical step sequences from producing the same ProvenanceRoot, protecting against trace substitution.

started_at_unix: u64

Unix timestamp when the trace was started.

finalized_at_unix: u64

Unix timestamp when the trace was finalized.

chain_binding: [u8; 32]

Blake3 commitment over the ProvenanceRoot fields themselves, bound to the issuing chain fingerprint. Prevents a root from being detached from its receipt and reattached to a different authorization event.

Implementations

impl ProvenanceRoot

pub fn verify_chain_binding(&self, chain_fingerprint: &[u8; 32]) -> bool

Recompute the chain_binding from the archived root and a chain fingerprint.

Returns true if the root has not been tampered with and was issued against the provided chain fingerprint.

pub fn merkle_root_hex(&self) -> String

Hex-encoded Merkle root for logging and display.

pub fn trace_id_hex(&self) -> String

Hex-encoded trace ID.

Trait Implementations

impl Clone for ProvenanceRoot

fn clone(&self) -> ProvenanceRoot

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProvenanceRoot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProvenanceRoot

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ProvenanceRoot

fn eq(&self, other: &ProvenanceRoot) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProvenanceRoot

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for ProvenanceRoot

impl StructuralPartialEq for ProvenanceRoot