Struct ProtectedSecret 

pub struct ProtectedSecret<'provider, P, State, Level>
where
    P: ProtectedMemoryProvider,
    Level: AssuranceLevel,
{ /* private fields */ }

Exact provider-owned protected allocation in one typestate.

Moving this handle may not move the provider’s backing bytes. The type is !Sync, !UnwindSafe, and !RefUnwindSafe. Those traits communicate API friction only; cleanup remains correct when callers use AssertUnwindSafe.

Implementations

impl<'provider, P, Level> ProtectedSecret<'provider, P, Uninitialized, Level>

where P: ProtectedMemoryProvider, Level: AssuranceLevel,

pub fn try_new( provider: &'provider P, token: &AssuranceToken<'provider, Level>, logical_bytes: usize, ) -> Result<Self, ProtectionError>

Reserves all bounded resources and creates zeroed protected storage.

impl<P, Level> ProtectedSecret<'_, P, Validated, Level>

where P: ProtectedMemoryProvider, Level: AssuranceLevel,

pub fn expose_secret(&self) -> ExposedProtectedSecret<'_>

Creates an explicit redacted exposure guard over validated bytes.

impl<'provider, P, State, Level> ProtectedSecret<'provider, P, State, Level>

where P: ProtectedMemoryProvider, Level: AssuranceLevel,

pub fn capacity(&self) -> usize

Complete logical allocation capacity.

pub const fn initialized_len(&self) -> usize

Initialized plaintext bytes tracked by this typestate.

pub fn operation_report( &self, token: &AssuranceToken<'provider, Level>, ) -> Result<ProtectedOperationReport, ProtectionError>

Reports posture only for this exact allocation and its recorded operation. Stale tokens fail instead of returning historical assurance.

pub fn try_close(self) -> Result<CleanupReport, CleanupError>

Consumes the public owner and reports the ordered cleanup result.

Trait Implementations

impl<P, State, Level> Debug for ProtectedSecret<'_, P, State, Level>

where P: ProtectedMemoryProvider, Level: AssuranceLevel,

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<P, State, Level> Drop for ProtectedSecret<'_, P, State, Level>

where P: ProtectedMemoryProvider, Level: AssuranceLevel,

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl<P, State, Level> Send for ProtectedSecret<'_, P, State, Level>

where P: ThreadMovableProvider + Sync, P::Handle: Send, State: Send, Level: AssuranceLevel + Send,