Enum TrustProof 

pub enum TrustProof {
    Hmac,
    JwtSig,
    OAuthCodeExchange,
    Ed25519,
}

Canonical identifiers of the verifiers that can produce a Trusted<T> from an Untrusted<T>. Each identifier maps to a runtime impl in [crate::trust_verifiers].

Variants

Hmac

HMAC-SHA256 over the raw payload with a shared secret; used for webhook signature verification (Stripe, GitHub, generic HMAC).

JwtSig

JWT signature verification (RS256/RS384/RS512) via a JWKS endpoint. Shared with Fase 10.e’s [crate::jwt_verifier].

OAuthCodeExchange

OAuth2 authorization-code exchange using PKCE S256. Returns an access token proof that the bearer controls the code verifier.

Ed25519

Ed25519 detached signature verification (Sigstore-style).

Implementations

impl TrustProof

pub const ALL: &'static [TrustProof]

Every variant. Keeping this as an explicit slice ensures the compiler errors if we add a variant without updating the catalogue consumers.

pub fn slug(self) -> &'static str

Slug used in source text — appears in #[refines(...)] annotations and in crate::type_checker diagnostics.

pub fn from_slug(slug: &str) -> Option<TrustProof>

Resolve a slug to a proof, returning None for unknown identifiers. The checker uses this to reject annotations that don’t map to the closed catalogue.

Trait Implementations

impl Clone for TrustProof

fn clone(&self) -> TrustProof

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustProof

impl Debug for TrustProof

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for TrustProof

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for TrustProof

impl Hash for TrustProof

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustProof

fn eq(&self, other: &TrustProof) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TrustProof