Module attenuation 

Structs

AttenuationProof

Wire proof carried by CapabilityToken.attenuation_proof.

AttenuationWitness

On-wire attenuation witness. The normalized scope encodings are included so verifiers can hash and check the already-normalized relation.

DelegationLink

A link in the delegation chain, recording that delegator granted a narrowed capability to delegatee.

DelegationLinkBody

The body of a delegation link, used as the signing input.

Enums

Attenuation

Describes how a scope was narrowed during delegation.

Functions

compute_attenuation_witness

Compute an on-wire witness for a parent-to-child attenuation.

delegate

Recursive-delegation mint helper.

scope_hash

Compute the stable SHA-256 hash of a canonicalized scope.

validate_attenuation

Validate that a child scope is a valid attenuation of a parent scope.

validate_attenuation_proof

Verify the wire attenuation_proof payload.

validate_delegation_chain

Validate an entire delegation chain.

validate_delegation_chain_with_trust_root

Validate a delegation chain under the chain-binding rule.

verify_attenuation_witness

Verify a previously-computed attenuation witness against scope hashes.

Type Aliases

ScopeHash

Hash of a canonicalized scope, encoded as lowercase SHA-256 hex.