Struct Attestation 

pub struct Attestation {

    pub version: u32,
    pub rid: ResourceId,
    pub issuer: IdentityDID,
    pub subject: DeviceDID,
    pub device_public_key: Ed25519PublicKey,
    pub identity_signature: Ed25519Signature,
    pub device_signature: Ed25519Signature,
    pub revoked_at: Option<DateTime<Utc>>,
    pub expires_at: Option<DateTime<Utc>>,
    pub timestamp: Option<DateTime<Utc>>,
    pub note: Option<String>,
    pub payload: Option<Value>,
    pub role: Option<Role>,
    pub capabilities: Vec<Capability>,
    pub delegated_by: Option<IdentityDID>,
    pub signer_type: Option<SignerType>,
}

Represents a 2-way key attestation between a primary identity and a device key.

Fields

version: u32

Schema version.

rid: ResourceId

Record identifier linking this attestation to its storage ref.

issuer: IdentityDID

DID of the issuing identity.

subject: DeviceDID

DID of the device being attested.

device_public_key: Ed25519PublicKey

Ed25519 public key of the device (32 bytes, hex-encoded in JSON).

identity_signature: Ed25519Signature

Issuer’s Ed25519 signature over the canonical attestation data (hex-encoded in JSON).

device_signature: Ed25519Signature

Device’s Ed25519 signature over the canonical attestation data (hex-encoded in JSON).

revoked_at: Option<DateTime<Utc>>

Timestamp when the attestation was revoked, if applicable.

expires_at: Option<DateTime<Utc>>

Expiration timestamp, if set.

timestamp: Option<DateTime<Utc>>

Creation timestamp.

note: Option<String>

Optional human-readable note.

payload: Option<Value>

Optional arbitrary JSON payload.

role: Option<Role>

Role for org membership attestations.

capabilities: Vec<Capability>

Capabilities this attestation grants.

delegated_by: Option<IdentityDID>

DID of the attestation that delegated authority (for chain tracking).

signer_type: Option<SignerType>

The type of entity that produced this signature (human, agent, workload). Included in the canonical JSON before signing — the signature covers this field.

Implementations

impl Attestation

pub fn is_revoked(&self) -> bool

Returns true if this attestation has been revoked.

pub fn from_json(json_bytes: &[u8]) -> Result<Self, AttestationError>

Deserializes an Attestation from JSON bytes.

Returns an error if the input exceeds MAX_ATTESTATION_JSON_SIZE (64 KiB).

pub fn to_debug_string(&self) -> String

Formats the attestation contents for debug or inspection purposes.

Trait Implementations

impl Clone for Attestation

fn clone(&self) -> Attestation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Attestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Attestation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Attestation

fn eq(&self, other: &Attestation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Attestation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Attestation