Struct RevocationPolicy 

pub struct RevocationPolicy {
    pub known: Vec<KeyRevocation>,
}

Consumer-held key revocations to enforce during verification (ACDP 0.3, RFC-ACDP-0014 §7).

The revocation signal is pull-based: the pipeline does not go looking for revocations on its own — the caller supplies the verified revocations it holds (from find_revocations, an out-of-band channel, or its own indefinite cache — the statement is permanent, cache accordingly). When known is empty the phase is inert and verification behaves exactly as before RFC-ACDP-0014.

When the body’s signing key matches a supplied revocation, §7 applies: a receipt-attested publish time strictly before the (earliest, §4) compromised_since boundary verifies as KeyAuthorization::HistoricallyAuthorizedPreCompromise; at/after the boundary, or with no verified receipt to place the context at all, verification fails closed with key_not_authorized — regardless of DID-document state and regardless of the receipt’s own validity. Note the interaction with ReceiptPolicy::Ignore: an unverified receipt provides no publish time, so a revoked key’s contexts all fail closed under it.

Only put revocations here that you have verified (strict body pipeline + the §5 not-self-signed rule) and, per §6, that you have decided to act on: producer-signed ones unconditionally; registry-attested ones (RevocationTrustClass::RegistryAttested) by default only for contexts served by or receipted by that same registry, with corroboration before global application.

Fields

known: Vec<KeyRevocation>

Verified revocations to enforce, matched against the signing key’s RFC-ACDP-0010 §6 fingerprint. The §4 earliest- compromised_since rule is applied across entries naming the same fingerprint, so include every revocation of a lineage, superseded ones too.

Trait Implementations

impl Clone for RevocationPolicy

fn clone(&self) -> RevocationPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RevocationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RevocationPolicy

fn default() -> RevocationPolicy

Returns the “default value” for a type.

impl Eq for RevocationPolicy

impl PartialEq for RevocationPolicy

fn eq(&self, other: &RevocationPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for RevocationPolicy