Struct PeerCommitmentRecord 

pub struct PeerCommitmentRecord {
    pub commitment_capable: bool,
    pub received_at: Instant,
    pub last_sig_verify_at: Instant,
    /* private fields */
}

Auditor-side per-peer commitment state.

Holds two things that together implement v10/v12 §2 step 5 and §6:

• last_commitment: the most recently received, verified, signed commitment from this peer. None if we’ve evicted it (TTL, sybil cap, peer-removed) or never received one.
• commitment_capable: a sticky boolean that flips to true on the first successful gossip ingest and NEVER reverts. Used by holder-eligibility (§6) and bootstrap-claim shield: a peer that has at least once proven it speaks v12 is forever held to that standard. Without stickiness, a peer could flip the flag off by silencing its gossip and downgrade to the weaker legacy audit path.

Fields

commitment_capable: bool

Sticky: true once this peer has gossiped a valid commitment. Set on ingest. Never set back to false except by full PeerRemoved cleanup.

received_at: Instant

When last_commitment was received. Used for TTL on the commitment itself (independent of the commitment_capable stickiness — losing the commitment via TTL doesn’t make us forget the peer ever spoke v12).

last_sig_verify_at: Instant

Last time we performed an ML-DSA signature verify for this peer’s commitment. Used to enforce the §2 step 3 rate limit (at most one sig verify per peer per 60s).

Implementations

impl PeerCommitmentRecord

pub fn from_verified(commitment: StorageCommitment, now: Instant) -> Self

Construct from a freshly-verified commitment. commitment_capable is set to true here and must remain so for the lifetime of the record.

pub fn capable_but_no_commitment(now: Instant) -> Self

Mark commitment-capable without storing a commitment (used when we’ve TTL-expired the commitment itself but want to remember the peer has spoken v12 before).

pub fn last_commitment(&self) -> Option<&StorageCommitment>

The stored commitment, if any. Read-only view of the private field.

pub fn commitment_hash(&self) -> Option<[u8; 32]>

The cached commitment_hash of the stored commitment (§13) — None when no commitment is held. Avoids re-serializing/re-hashing on every verifier snapshot.

pub fn set_commitment(&mut self, commitment: StorageCommitment, now: Instant)

Replace the stored commitment and refresh the cached hash together, so the two never drift.

pub fn clear_commitment(&mut self)

Drop the stored commitment and its cached hash together.

Trait Implementations

impl Clone for PeerCommitmentRecord

fn clone(&self) -> PeerCommitmentRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PeerCommitmentRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.