Struct AgentMetadata 

pub struct AgentMetadata {
    pub role: String,
    pub host: String,
    pub capabilities: Vec<String>,
    pub issued_at: String,
    pub expires_at: Option<String>,
    pub caveats: Caveats,
}

Metadata claimed by an agent at certificate-issue time. These fields are signed by the user; they cannot be tampered with without invalidating the cert.

Fields

role: String

Role label — e.g. "inference-worker", "orchestrator".

host: String

Host hint — e.g. "host-a", "host-b".

capabilities: Vec<String>

Capabilities advertised to the mesh — e.g. ["ollama", "vllm"].

issued_at: String

Issue time, RFC 3339 string. Wall-clock is allowed here because it’s a claim in a signed cert, not a coordination primitive.

expires_at: Option<String>

Optional expiry, RFC 3339. None means the cert has no declared expiry; consumers may still impose their own.

caveats: Caveats

The agent’s attenuated authority — the capability set it was minted with. Part of the signed payload, so it cannot be tampered with without invalidating the cert: a verifier can read these caveats and trust them. Defaults to Caveats::top (unrestricted), which is the back-compatible “no caveats declared” authority.

AgentKey::delegate enforces child ⊑ parent at mint time, and CertChain::verify re-checks attenuation at every link — so a chain that amplifies authority is rejected even if each signature is valid (see crate::caveats and issue #35).

Trait Implementations

impl Clone for AgentMetadata

fn clone(&self) -> AgentMetadata

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AgentMetadata

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AgentMetadata

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AgentMetadata

impl PartialEq for AgentMetadata

fn eq(&self, other: &AgentMetadata) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AgentMetadata

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AgentMetadata