Enum WitnessError 

pub enum WitnessError {
    Shrank {
        origin: String,
        seen: u64,
        offered: u64,
    },
    Forked {
        origin: String,
        seen: u64,
        offered: u64,
    },
    Stale {
        origin: String,
        witness_size: u64,
    },
    ProofMissing {
        origin: String,
        seen: u64,
    },
    Inconsistent {
        origin: String,
        old_size: u64,
        offered: u64,
    },
    Unsigned(SignError),
    Unavailable(String),
}

Why a witness would not cosign.

Variants

Shrank

The log is smaller than when this witness last saw it.

Runs were removed. The single most important thing a witness catches, and the one an operator auditing itself structurally cannot.

Fields

origin: String

seen: u64

offered: u64

Forked

The new checkpoint does not extend the one this witness last cosigned.

Either history was rewritten, or this is a different history of the same log — the split view. A witness cannot tell which, and does not need to: both are refusals.

Fields

origin: String

seen: u64

offered: u64

Stale

The witness is at a different size than the proof starts from.

A stale client, not an integrity event, and the distinction is the whole reason this is its own variant. The witness has simply moved past the checkpoint this proof was built from, and it says where it is, so the fix is to build a proof from there and retry.

Collapsing it into Forked would report a routine cursor mismatch as a history that does not extend — and a team paged twice for that stops believing the alert that matters.

Fields

origin: String

witness_size: u64

ProofMissing

A proof was required and none was usable.

Fields

origin: String

seen: u64

Inconsistent

The witness could not verify the growth this submission claimed, and which side is at fault is not decidable from the answer.

Its own variant rather than Forked, because the two send an operator to different places. A witness answering this consistency proof does not verify is either looking at a proof this log built wrongly — a bug on this side, permanent until the code changes — or at a history that genuinely no longer extends what it remembers. Forked is reserved for the answer where the witness removes the ambiguity itself: equal sizes with unequal roots, which no proof-building mistake can produce.

Classified with the integrity refusals all the same, and deliberately: resubmitting reproduces it, so filing it as routine would leave a plane whose evidence silently stopped accumulating.

Fields

origin: String

old_size: u64

offered: u64

Unsigned(SignError)

This log could not sign its own checkpoint.

The fault is local, and saying so is the point: a witness cannot cosign a checkpoint it cannot attribute, so an unsigned submission is refused with 403 by every conformant witness — which reads as the witness does not trust us rather than as our signer is down.

Unavailable(String)

The witness could not be reached or refused for its own reasons.

Trait Implementations

impl Debug for WitnessError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for WitnessError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for WitnessError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<SignError> for WitnessError

fn from(source: SignError) -> Self

Converts to this type from the input type.