Struct SessionProof 

pub struct SessionProof {
    pub version: u32,
    pub session_id: String,
    pub timestamp: String,
    pub user_prompts: Vec<UserPrompt>,
    pub semantic_context: Vec<SemanticSearchResult>,
    pub events: Vec<SessionEvent>,
    pub files_read: Vec<FileSnapshot>,
    pub files_written: Vec<FileSnapshot>,
    pub files_root: [u8; 32],
    pub signature: [u8; 64],
    pub signer_public_key: [u8; 32],
    pub device_id: [u8; 16],
}

A session proof captures everything the AI touched in a single turn.

Unlike a search ProofReceipt (which proves what search results the AI got), a SessionProof proves which files the AI read and wrote during a response, what the user asked, and what the semantic substrate contained.

This is the thing git CAN’T do — git tracks diffs, Canon tracks cognition: what the AI’s understanding of the codebase looked like at decision time.

Fields

version: u32

session_id: String

timestamp: String

user_prompts: Vec<UserPrompt>

What the user asked the AI

semantic_context: Vec<SemanticSearchResult>

Semantic search results for each user prompt — the AI’s “knowledge state”

events: Vec<SessionEvent>

Tool call events in chronological order (with input/output previews)

files_read: Vec<FileSnapshot>

Files the AI read (with content hashes)

files_written: Vec<FileSnapshot>

Files the AI wrote or edited (with content hashes)

files_root: [u8; 32]

Merkle root of all file hashes (reads + writes, sorted by path)

signature: [u8; 64]

Ed25519 signature

signer_public_key: [u8; 32]

Signer’s public key

device_id: [u8; 16]

Signer’s device ID

Implementations

impl SessionProof

pub fn signing_bytes(&self) -> Vec<u8>

Compute deterministic bytes for signing.

Layout: version (4) || session_id_hash (32) || prompts_hash (32) || semantic_hash (32) || files_root (32) Total: 164 bytes

pub fn verify_signature(&self) -> Result<()>

Verify the Ed25519 signature.

pub fn verify_files_root(&self) -> Result<()>

Verify the files Merkle root matches the file snapshots.

pub fn verify_all(&self) -> Result<()>

Verify everything: signature + files root.

Trait Implementations

impl Clone for SessionProof

fn clone(&self) -> SessionProof

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionProof

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionProof

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SessionProof

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.