Struct Requirement 

pub struct Requirement {
    pub provider: String,
    pub scope: String,
    pub allowed_subjects: Vec<String>,
    pub max_proof_age_seconds: u64,
    pub loa: u8,
}

A single requirement attached to a rule. Authored in YAML as the identity: block under a rule; compiled into this struct once at rule-load time and reused on every match.

Fields

provider: String

id of the provider in identity.yaml to invoke. Must resolve to a known ProviderConfig.

scope: String

Logical scope name (free-form). Doubles as the cache partition key, so a proof for scm.commit_to_main does not satisfy a rule asking for db.production_apply.

allowed_subjects: Vec<String>

Set of subjects allowed to satisfy this gate. Each entry is matched against VerifiedIdentity::subject AND VerifiedIdentity::email; ANY hit passes.

Accepted forms:

• Email – [email protected]
• Subject – idme|550e8400-e29b-41d4-a716-446655440000
• Wildcard – * (any user verifying is enough; useful for single-operator laptops)

max_proof_age_seconds: u64

Maximum acceptable age (seconds) for a cached proof. Older proofs are ignored and the user is re-prompted.

loa: u8

Required ID.me level-of-assurance (0/1/2/3). A proof issued at a lower LOA does not satisfy the gate.

Implementations

impl Requirement

pub fn allows(&self, vi: &VerifiedIdentity) -> bool

Does this allow-list include the given identity?

pub fn is_satisfied_by(&self, proof: &Proof, now_secs: u64) -> bool

True if the given (already-decoded, signature-verified) proof satisfies all of: provider, scope, allow-list, LOA, freshness.

Trait Implementations

impl Clone for Requirement

fn clone(&self) -> Requirement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Requirement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Requirement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Requirement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.