Struct DstackTdxPolicy 

pub struct DstackTdxPolicy {
    pub expected_bootchain: Option<ExpectedBootchain>,
    pub app_compose: Option<Value>,
    pub os_image_hash: Option<String>,
    pub allowed_tcb_status: Vec<String>,
    pub pccs_url: Option<String>,
    pub cache_collateral: bool,
    pub disable_runtime_verification: bool,
}

Policy configuration for dstack TDX verification.

Fields

expected_bootchain: Option<ExpectedBootchain>

Expected bootchain measurements (MRTD, RTMR0-2).

app_compose: Option<Value>

Expected app compose configuration.

os_image_hash: Option<String>

Expected OS image hash (SHA256).

allowed_tcb_status: Vec<String>

Allowed TCB status values.

pccs_url: Option<String>

PCCS URL for collateral fetching. Defaults to https://pccs.phala.network/tdx/certification/v4.

cache_collateral: bool

Cache collateral to avoid repeated fetches.

disable_runtime_verification: bool

Disable runtime verification (NOT RECOMMENDED for production).

When false (default), all runtime fields (expected_bootchain, app_compose, os_image_hash) must be provided or verification will fail. Set to true only for development/testing.

Implementations

impl DstackTdxPolicy

pub fn dev() -> Self

Relaxed policy for development.

Accepts common TCB statuses and disables runtime verification (bootchain, app_compose, os_image_hash checks are skipped).

pub fn validate(&self) -> Result<(), AtlsVerificationError>

Validate the policy configuration.

Checks that:

• allowed_tcb_status values are valid TCB status strings
• os_image_hash is a valid hex string (if provided)
• expected_bootchain fields are valid hex strings (if provided)

Trait Implementations

impl Clone for DstackTdxPolicy

fn clone(&self) -> DstackTdxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DstackTdxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DstackTdxPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DstackTdxPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl IntoVerifier for DstackTdxPolicy

type Verifier = DstackTDXVerifier

The verifier type produced by this conversion.

fn into_verifier(self) -> Result<DstackTDXVerifier, AtlsVerificationError>

Convert this policy/config into a verifier.

impl Serialize for DstackTdxPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.