Enum CredentialVerdict 

pub enum CredentialVerdict {
    Valid {
        issuer: IdentityDID,
        subject: CanonicalDid,
        caps: Vec<Capability>,
        as_of: u128,
    },
    SaidMismatch,
    SchemaInvalid,
    IssuerSignatureInvalid,
    RegistryNotEstablished,
    CredentialRevoked {
        revoked_at: u128,
    },
    Expired {
        expired_at: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    WitnessQuorumNotMet {
        event: LifecycleEvent,
        collected: usize,
        required: usize,
    },
    IssuerKelDuplicitous,
}

The distinguishable outcome of verify_credential.

Every failure is a named variant so a consumer can explain why a credential did not verify, never a generic “invalid”.

Variants

Valid

The credential is authentic, anchored, witnessed (per policy), unexpired, and not revoked at/before the presentation position.

Fields

issuer: IdentityDID

Issuer AID (did:keri:), parsed once at construction.

subject: CanonicalDid

Subject (holder) AID (did:keri:), parsed once at construction.

caps: Vec<Capability>

The capabilities the credential grants (a.capability), parsed once — a capability that does not parse fails the verdict closed (never silently dropped).

as_of: u128

The KEL position the verdict is as-of: the tip (seq) of the given issuer KEL.

SaidMismatch

The recomputed ACDC d (or nested a.d) did not match the embedded SAID.

SchemaInvalid

The attributes failed validation against the embedded capability schema, or the schema SAID s is not the pinned one.

IssuerSignatureInvalid

The issuance was not anchored, or its issuer signature did not verify against the signing-time key.

RegistryNotEstablished

The registry (vcp) was never anchored in the issuer KEL, so status is unknown.

CredentialRevoked

A revocation reached the policy bar and is anchored at/before the presentation.

Fields

revoked_at: u128

The KEL position at which the revocation was anchored.

Expired

The credential expired at expired_at, checked against the injected now.

Fields

expired_at: DateTime<Utc>

The expiry instant declared in a.expiry.

now: DateTime<Utc>

The injected verification time it was checked against.

WitnessQuorumNotMet

Under VerifierWitnessPolicy::RequireWitnesses a lifecycle anchor did not reach witness quorum (fail-closed). Names which anchor missed.

Fields

event: LifecycleEvent

Which lifecycle anchor (vcp/iss/rev) missed quorum.

collected: usize

Distinct valid designated-witness receipts collected for that anchor.

required: usize

Receipts required by the in-force backer threshold at that anchor.

IssuerKelDuplicitous

The issuer KEL forks (two events at one seq with different SAIDs) — fail-closed in both witness policies.

Implementations

impl CredentialVerdict

pub fn is_valid(&self) -> bool

Whether the credential verified (Valid).

Trait Implementations

impl Clone for CredentialVerdict

fn clone(&self) -> CredentialVerdict

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialVerdict

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CredentialVerdict

impl PartialEq for CredentialVerdict

fn eq(&self, other: &CredentialVerdict) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CredentialVerdict