Struct CredentialIssueRecord 

pub struct CredentialIssueRecord {
    pub component_ref: String,
    pub session_id: String,
    pub key: String,
    pub kind: String,
}

One credential handed over to a component.

Deliberately not a CapDecisionRecord. That one records what policy decided; this one records that material actually crossed into the guest — design §9 requires an entry for “every get-secret that returns material: component, session, key, timestamp — never values”, and the two answer different questions when read back.

component_ref and session_id are carried on the record itself rather than inherited from an enclosing span: an audit record must identify what it describes from its own fields, not from whatever happens to enclose the call site. That keeps the record intact wherever the host later chooses to serve a credential from, and keeps the layer’s decoding a function of the event alone.

There is no field that could hold a value, and none is added: the type is the enforcement. list-secrets has no record of its own on purpose — design §9 again, “it would bury the one event that matters”.

Fields

component_ref: String

session_id: String

The session the credential was issued under. Never empty in practice: get-secret requires a session (design §3.3).

key: String

The store lookup key, as the guest asked for it — untrusted input, so every renderer escapes it.

kind: String

Trait Implementations

impl Clone for CredentialIssueRecord

fn clone(&self) -> CredentialIssueRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialIssueRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.