Struct MutationAuthorizationContext 

pub struct MutationAuthorizationContext {
    pub source_mac: MacAddr,
    pub source_network: Option<NpduAddress>,
    pub provenance: TransportProvenance,
    pub trust: MutationTrust,
    pub invoke_id: Option<u8>,
    pub service_choice: MutationService,
    pub target: MutationTarget,
}

Claimed source identity, verified ingress scope, and decoded target supplied to mutation policy.

Neither address nor a subscription’s process ID authenticates an operator. source_mac identifies the immediate peer (often a router); source_network is the peer-claimed routed origin, not a verified identity. SC mTLS authenticates the channel/peer, not service authorization; neither address is a certificate principal.

provenance is the reassembled ingress snapshot threaded from dispatch (segmentation mismatches already fail closed at reassembly, so every element of one request — including each WPM element — observes the same snapshot). trust is the channel/relay scope derived from it, never leaf identity. Debug is redacted by construction: address lengths and the target kind only, never MAC bytes, property values, file payloads, or other decoded inputs.

Fields

source_mac: MacAddr

Immediate data-link peer address.

source_network: Option<NpduAddress>

Claimed originating NPDU address, when present.

provenance: TransportProvenance

Honest transport + origin provenance for this ingress snapshot.

trust: MutationTrust

Channel/relay scope derived from provenance; never leaf identity.

invoke_id: Option<u8>

A confirmed request’s invoke identifier; None for an unconfirmed request, which carries none.

service_choice: MutationService

The service that asks for the mutation.

target: MutationTarget

Decoded target and parameters; current element for WPM, current Channel for WriteGroup.

Implementations

impl MutationAuthorizationContext

pub fn direct_sc_identity(&self) -> Option<DirectScIdentity>

Original verified direct-SC leaf and incarnation; absent on other ingress.

Trait Implementations

impl Clone for MutationAuthorizationContext

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MutationAuthorizationContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for MutationAuthorizationContext

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for MutationAuthorizationContext