Struct BrokerLimits 

pub struct BrokerLimits {
    pub max_encrypt_size: usize,
    pub max_payload_size: usize,
    pub grace_versions: u32,
    pub svid_ttl_secs: u64,
    pub retain_versions: Option<u32>,
}

Broker-wide runtime limits + rotation policy, supplied by the binary at startup and shared (immutable) across connections.

These are broker knobs (not catalog/policy data): payload caps, SVID lifetime, and the rotation grace/retention windows the manager applies on rotate + the retention sweep (vault-xhq / vault-uo1).

Fields

max_encrypt_size: usize

Cap (bytes) on the encrypt plaintext and the decrypt ciphertext; over-limit → payload_too_large (wire §2.1). Default DEFAULT_MAX_ENCRYPT_SIZE.

max_payload_size: usize

Cap (bytes) on the set value and the import key material; over-limit → payload_too_large (wire §2.1, “same mechanism” as the AEAD cap). This is the broker-side max that replaces relying on the u32 frame ceiling (vault-sao). Default DEFAULT_MAX_PAYLOAD_SIZE.

grace_versions: u32

Rotation grace window in key versions: on rotate, the manager raises the backend’s min_decryption_version to new_version - grace_versions (clamped at 1), so versions older than the window stop decrypting/verifying while the in-window ones still do. Default DEFAULT_ROTATION_GRACE_VERSIONS.

svid_ttl_secs: u64

Lifetime, in seconds, for SPIFFE SVIDs minted by the Workload API. Default DEFAULT_SVID_TTL_SECS.

retain_versions: Option<u32>

Retention floor in key versions: BrokerLimits::retention_floor raises the backend’s min_available_version to latest - retain_versions (clamped at 1), irreversibly pruning archived key material below it. None disables the sweep (retain everything).

Implementations

impl BrokerLimits

pub const fn grace_floor(&self, latest: u32) -> u32

The grace floor (min_decryption_version) for a key now at latest: latest - grace_versions, clamped to at least 1.

pub const fn retention_floor(&self, latest: u32) -> Option<u32>

The retention floor (min_available_version) for a key now at latest, or None when retention is disabled. latest - retain_versions, clamped to at least 1 (never prunes the only/last version).

Trait Implementations

impl Clone for BrokerLimits

fn clone(&self) -> BrokerLimits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for BrokerLimits

impl Debug for BrokerLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BrokerLimits

fn default() -> Self

Returns the “default value” for a type.