Struct PeerGrant 

pub struct PeerGrant {
    pub scope: Scope,
    pub mutates: bool,
    pub recovery: Recovery,
    pub max_sensitivity: Sensitivity,
    pub output_sensitivity: Sensitivity,
    pub retry: RetryPolicy,
    /* private fields */
}

What the operator grants a peer.

Fields

scope: Scope

The authority this peer may hold. Narrowed further by the caller’s own scope at every hop — a grant is a ceiling, not an entitlement.

mutates: bool

Whether a call to this peer changes the world.

recovery: Recovery

max_sensitivity: Sensitivity

output_sensitivity: Sensitivity

retry: RetryPolicy

Implementations

impl PeerGrant

pub fn new(scope: Scope) -> Self

A grant with the conservative posture: mutating, operator-resolved.

pub fn with_credential(self, peer: &PeerId, credential: PeerCredential) -> Self

Attach the credential this peer is called with.

Panics

If the credential’s audience is not this peer. That is a configuration error the operator must see at startup rather than a refusal at 3am, and there is no sensible way to continue: the alternative is holding a credential that can only ever be sent to the wrong place.

pub fn with_source(self, source: Arc<dyn CredentialSource>) -> Self

Call this peer with a credential naming the person each run acts for, obtained from source when the call is made.

From then on a run that acts for nobody is refused this peer rather than sent out under the plane’s name, and the credential held through with_credential, if any, is presented only for a run admitted as the plane.

pub fn source(&self) -> Option<&Arc<dyn CredentialSource>>

Where this peer’s subject-bound credentials come from, if it has one.

pub fn read_only(self) -> Self

pub const fn output_sensitivity(self, s: Sensitivity) -> Self

Trait Implementations

impl Clone for PeerGrant

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PeerGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.