Struct RuntimeAttestationEvidence 

pub struct RuntimeAttestationEvidence {
    pub schema: String,
    pub verifier: String,
    pub tier: RuntimeAssuranceTier,
    pub issued_at: u64,
    pub expires_at: u64,
    pub evidence_sha256: String,
    pub runtime_identity: Option<String>,
    pub workload_identity: Option<WorkloadIdentity>,
    pub claims: Option<Value>,
}

Normalized runtime attestation evidence carried with governed requests.

Fields

schema: String

Schema or format identifier of the upstream attestation statement.

verifier: String

Attestation verifier or relying party that accepted the evidence.

tier: RuntimeAssuranceTier

Normalized assurance tier resolved from the evidence.

issued_at: u64

Unix timestamp (seconds) when this attestation was issued.

expires_at: u64

Unix timestamp (seconds) when this attestation expires.

evidence_sha256: String

Stable SHA-256 digest of the attestation evidence payload.

runtime_identity: Option<String>

Optional runtime identity or workload identifier associated with the evidence.

workload_identity: Option<WorkloadIdentity>

Optional normalized workload identity when the upstream verifier exposed one explicitly.

claims: Option<Value>

Optional structured claims preserved for adapters or operator inspection.

Implementations

impl RuntimeAttestationEvidence

pub fn is_valid_at(&self, now: u64) -> bool

pub fn normalized_workload_identity( &self, ) -> Result<Option<WorkloadIdentity>, WorkloadIdentityError>

pub fn validate_workload_identity_binding( &self, ) -> Result<(), WorkloadIdentityError>

pub fn resolve_effective_runtime_assurance( &self, policy: Option<&AttestationTrustPolicy>, now: u64, ) -> Result<ResolvedRuntimeAssurance, AttestationTrustError>

Trait Implementations

impl Clone for RuntimeAttestationEvidence

fn clone(&self) -> RuntimeAttestationEvidence

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeAttestationEvidence

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RuntimeAttestationEvidence

fn deserialize<__D>( __deserializer: __D, ) -> Result<RuntimeAttestationEvidence, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RuntimeAttestationEvidence

fn eq(&self, other: &RuntimeAttestationEvidence) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RuntimeAttestationEvidence

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RuntimeAttestationEvidence