Struct GuestDeclaration 

pub struct GuestDeclaration {
    pub probe_source: String,
    pub guest_pid: u32,
    pub guest_comm: String,
    pub guest_monotonic_ns: u64,
}

Fields a guest-side agent fills. Anything else is host-stamped on receipt and overrides what the guest sent (ADR-0006 §6).

Type-level non-forgeability. The struct has no cell_id/run_id/ spec_signature_hash fields — the wire decoder (listener::decode_frame) drops any such keys the guest tries to stuff into the CBOR map, and the stamping layer (host_stamp::stamp) reads attribution exclusively from HostStamp. This is the structural enforcement of ADR-0006 §6: a compromised guest cannot forge cross-cell attribution because the attribution fields don’t exist on this type.

Fields

probe_source: String

Probe source identifier (e.g. "process.spawned", "net.connect_attempted"). The set of valid values is locked in cellos_telemetry::probe_source.

guest_pid: u32

Guest-side process id observed by the probe.

guest_comm: String

Guest-side process command name.

guest_monotonic_ns: u64

Guest-side monotonic timestamp at probe-fire (ns).

Trait Implementations

impl Clone for GuestDeclaration

fn clone(&self) -> GuestDeclaration

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuestDeclaration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.