Struct PinnedIdentity 

pub struct PinnedIdentity {
    pub did: String,
    pub public_key_hex: String,
    pub kel_tip_said: Option<String>,
    pub kel_sequence: Option<u64>,
    pub first_seen: DateTime<Utc>,
    pub origin: String,
    pub trust_level: TrustLevel,
}

A pinned identity root — what we trusted and when.

This record stores the state of a trusted identity at the time of pinning, including KEL context for rotation-aware verification.

Fields

did: String

The DID being pinned (e.g., “did:keri:EXq5…”)

public_key_hex: String

Root public key, raw bytes stored as lowercase hex.

Always normalized at pin-time via hex::encode. All comparisons happen on decoded bytes, never on strings.

kel_tip_said: Option<String>

KEL tip SAID at the time of pinning (enables rotation continuity check).

kel_sequence: Option<u64>

KEL sequence number at time of pinning.

first_seen: DateTime<Utc>

When this pin was created.

origin: String

Where we learned this identity (repo URL, file path, “manual”, etc.)

trust_level: TrustLevel

How this pin was established.

Implementations

impl PinnedIdentity

pub fn public_key_bytes(&self) -> Result<Vec<u8>, TrustError>

Decode the pinned public key to raw bytes.

Validates hex at construction; this should never fail on a well-formed pin.

pub fn key_matches(&self, presented_pk: &[u8]) -> Result<bool, TrustError>

Check if the pinned key matches the given raw bytes.

Comparison is always on decoded bytes, never on string representation. This handles case differences and other encoding variations.

Trait Implementations

impl Clone for PinnedIdentity

fn clone(&self) -> PinnedIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PinnedIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PinnedIdentity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PinnedIdentity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.