Struct VerificationPolicy 

pub struct VerificationPolicy {
    pub validate_body_schema: bool,
    pub allow_unknown_status: bool,
    pub receipts: ReceiptPolicy,
    pub historical_keys: HistoricalKeyPolicy,
}

Consumer-tunable strictness for VerifiedContext::fetch_with_policy.

For ACDP v0.1.0 the verification profile is always strict:

• did:web is required for every producer identity — enforced unconditionally by verify_signature_envelope (RFC-ACDP-0001 §5.4), regardless of any policy field.
• Embedded DataRef hashes are verified by acdp_validation::validate_body whenever validate_body_schema is set.

Only the fields below have real effect in this version; there are no relaxed-mode did:web or embedded-hash knobs.

Fields

validate_body_schema: bool

If true, run acdp_validation::validate_body (structural schema checks plus embedded-DataRef hash verification) before any cryptographic check. Default true. Set false only in diagnostic paths that want to attempt signature verification despite a body known to fail structural checks.

allow_unknown_status: bool

If true, accept Status::Other values (degrade to active per RFC-ACDP-0004 §4.1). When false, reject unknown statuses. Default true.

receipts: ReceiptPolicy

Registry-receipt handling (ACDP 0.2, RFC-ACDP-0010). Default ReceiptPolicy::VerifyIfPresent.

historical_keys: HistoricalKeyPolicy

Historical-key handling (ACDP 0.2, WS-B). Default HistoricalKeyPolicy::AcceptWithReceipt.

Implementations

impl VerificationPolicy

pub fn strict_v0_1_0() -> Self

The v0.1.0 strict verification profile (RFC-ACDP-0001 §5.11, §9.2).

Runs the full §5.11 pipeline: body schema validation, content_hash recomputation, did:web key resolution, signature verification, and embedded data_ref.content_hash checks. Returns on the first failure.

This is the only mode covered by the acdp-consumer conformance profile. Relaxed modes (Diagnostic, UnsafeForTests) are NOT available in this crate in v0.1.0 — they would be separately-named opt-ins per §9.2, and are not currently implemented.

NOT identical to Default::default() as of 0.2: the default policy is receipt-aware (VerifyIfPresent + AcceptWithReceipt), while this named profile preserves the exact v0.1.0 semantics — receipts inert (ReceiptPolicy::Ignore) and only assertionMethod keys accepted (HistoricalKeyPolicy::Reject). Callers pinned to this constructor keep v0.1.0 behavior across the 0.2 upgrade.

Trait Implementations

impl Clone for VerificationPolicy

fn clone(&self) -> VerificationPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerificationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerificationPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for VerificationPolicy

impl PartialEq for VerificationPolicy

fn eq(&self, other: &VerificationPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for VerificationPolicy