Skip to main content

Crate chio_core

Crate chio_core 

Source
Expand description

§chio-core

Shared vocabulary for the Chio protocol. This crate defines the fundamental types that flow between all Chio components: capability tokens, tool grants, scopes, receipts, and canonical JSON serialization helpers.

Nothing in this crate performs I/O or depends on a runtime. It is a pure data-and-crypto crate suitable for use in WASM, embedded, and no-std (with alloc) environments.

The shared substrate now lives in chio-core-types, and the heavier domain implementations now live in dedicated crates. This crate preserves the historical chio_core::* surface by re-exporting those extracted crates.

Re-exports§

pub use extension::negotiate_extension;
pub use extension::validate_extension_inventory;
pub use extension::validate_extension_manifest;
pub use extension::validate_official_stack_package;
pub use extension::validate_qualification_matrix;
pub use extension::CanonicalContractKind;
pub use extension::CanonicalTruthSurface;
pub use extension::ChioExtensionInventory;
pub use extension::ChioExtensionManifest;
pub use extension::ChioExtensionPoint;
pub use extension::ExtensionCompatibility;
pub use extension::ExtensionContractError;
pub use extension::ExtensionDistribution;
pub use extension::ExtensionEvidenceMode;
pub use extension::ExtensionIsolation;
pub use extension::ExtensionNegotiationOutcome;
pub use extension::ExtensionNegotiationRejection;
pub use extension::ExtensionNegotiationRejectionCode;
pub use extension::ExtensionNegotiationReport;
pub use extension::ExtensionPointKind;
pub use extension::ExtensionPrivilege;
pub use extension::ExtensionQualificationCase;
pub use extension::ExtensionQualificationMatrix;
pub use extension::ExtensionRuntimeEnvelope;
pub use extension::ExtensionStability;
pub use extension::OfficialImplementationSource;
pub use extension::OfficialStackComponent;
pub use extension::OfficialStackPackage;
pub use extension::OfficialStackProfile;
pub use extension::QualificationInvariant;
pub use extension::QualificationMode;
pub use extension::QualificationOutcome;
pub use extension::CHIO_EXTENSION_INVENTORY_SCHEMA;
pub use extension::CHIO_EXTENSION_MANIFEST_SCHEMA;
pub use extension::CHIO_EXTENSION_NEGOTIATION_SCHEMA;
pub use extension::CHIO_EXTENSION_QUALIFICATION_MATRIX_SCHEMA;
pub use extension::CHIO_OFFICIAL_STACK_SCHEMA;
pub use identity_network::validate_identity_interop_qualification_matrix;
pub use identity_network::validate_public_identity_profile;
pub use identity_network::validate_public_wallet_directory_entry;
pub use identity_network::validate_public_wallet_routing_manifest;
pub use identity_network::IdentityArtifactKind;
pub use identity_network::IdentityArtifactReference;
pub use identity_network::IdentityBindingPolicy;
pub use identity_network::IdentityCredentialFamily;
pub use identity_network::IdentityDidMethod;
pub use identity_network::IdentityInteropQualificationCase;
pub use identity_network::IdentityInteropQualificationMatrix;
pub use identity_network::IdentityInteropScenarioKind;
pub use identity_network::IdentityNetworkContractError;
pub use identity_network::IdentityProofFamily;
pub use identity_network::IdentityQualificationOutcome;
pub use identity_network::PublicIdentityProfileArtifact;
pub use identity_network::PublicWalletDirectoryEntryArtifact;
pub use identity_network::PublicWalletRoutingManifestArtifact;
pub use identity_network::SignedIdentityInteropQualificationMatrix;
pub use identity_network::SignedPublicIdentityProfile;
pub use identity_network::SignedPublicWalletDirectoryEntry;
pub use identity_network::SignedPublicWalletRoutingManifest;
pub use identity_network::WalletDirectoryLookupGuardrails;
pub use identity_network::WalletRoutingGuardrails;
pub use identity_network::WalletTransportMode;
pub use identity_network::CHIO_IDENTITY_INTEROP_QUALIFICATION_MATRIX_SCHEMA;
pub use identity_network::CHIO_PUBLIC_IDENTITY_PROFILE_SCHEMA;
pub use identity_network::CHIO_PUBLIC_WALLET_DIRECTORY_ENTRY_SCHEMA;
pub use identity_network::CHIO_PUBLIC_WALLET_ROUTING_MANIFEST_SCHEMA;
pub use standards::ChioGovernedAuthorizationBinding;
pub use standards::ChioPortableClaimCatalog;
pub use standards::ChioPortableIdentityBinding;
pub use standards::CHIO_GOVERNED_AUTH_AUTHORITATIVE_SOURCE;
pub use standards::CHIO_GOVERNED_AUTH_BINDING_SCHEMA;
pub use standards::CHIO_PORTABLE_CLAIM_CATALOG_SCHEMA;
pub use standards::CHIO_PORTABLE_IDENTITY_BINDING_SCHEMA;
pub use standards::CHIO_PORTABLE_ISSUER_IDENTITY_HTTPS_JWKS;
pub use standards::CHIO_PORTABLE_SUBJECT_BINDING_DID_CHIO_SUBJECT_KEY_THUMBPRINT;
pub use standards::CHIO_PROVENANCE_ANCHOR_DID_CHIO;
pub use chio_appraisal as appraisal;
pub use chio_autonomy as autonomy;
pub use chio_credit as credit;
pub use chio_federation as federation;
pub use chio_governance as governance;
pub use chio_listing as listing;
pub use chio_market as market;
pub use chio_open_market as open_market;
pub use chio_underwriting as underwriting;
pub use chio_web3 as web3;

Modules§

canonical
Canonical JSON serialization (RFC 8785 / JCS).
capability
Capability tokens: Ed25519-signed, scoped, time-bounded authorizations.
crypto
Signing and verification primitives for Chio artifacts.
error
Error types for chio-core.
extension
Chio extension and official-stack contract types.
hashing
Cryptographic hashing (SHA-256).
identity_network
Chio public identity and wallet network contracts.
manifest
Tool server manifests: signed declarations of available tools.
merkle
RFC 6962-compatible Merkle tree (Certificate Transparency style).
message
Protocol messages between Agent and Kernel.
receipt
Chio receipts: signed proof that a tool call was evaluated.
session
Session-scoped identifiers and normalized operations.
standards

Structs§

AnchorInclusionProof
AttestationTrustPolicy
AttestationTrustRule
AutonomousComparisonDelta
AutonomousComparisonReport
AutonomousDriftReport
AutonomousDriftSignal
AutonomousEvidenceReference
AutonomousExecutionDecisionArtifact
AutonomousExecutionRollbackControl
AutonomousExecutionSafetyGate
AutonomousModelProvenance
AutonomousPricingAuthorityEnvelopeArtifact
AutonomousPricingDecisionArtifact
AutonomousPricingExplanationFactor
AutonomousPricingInputArtifact
AutonomousPricingSupportBoundary
AutonomousQualificationCase
AutonomousQualificationMatrix
AutonomousRollbackPlanArtifact
CapabilityToken
A Chio capability token. Scoped, time-bounded, cryptographically signed.
CapabilityTokenBody
The body of a capability token, containing every field except the signature. Used as the signing input.
CapitalAllocationDecisionArtifact
CapitalAllocationDecisionFinding
CapitalAllocationDecisionSupportBoundary
CapitalAllocationInstructionDraft
CapitalBookEvent
CapitalBookEvidenceReference
CapitalBookQuery
CapitalBookReport
CapitalBookSource
CapitalBookSummary
CapitalBookSupportBoundary
CapitalExecutionAuthorityStep
CapitalExecutionInstructionArtifact
CapitalExecutionInstructionSupportBoundary
CapitalExecutionObservation
CapitalExecutionRail
CapitalExecutionWindow
CapitalPoolOptimizationArtifact
CapitalPoolOptimizationSupportBoundary
CapitalPoolRecommendation
CapitalPoolSimulationDelta
CapitalPoolSimulationReport
ChildRequestReceipt
Signed audit record for a nested child request handled under a parent tool call.
ChildRequestReceiptBody
The body of a child-request receipt (everything except the signature).
ChioIdentityAssertion
Optional continuity or login assertion carried across verifier-facing flows.
ChioReceipt
A Chio receipt. Signed proof that a tool call was evaluated by the Kernel.
ChioReceiptBody
The body of a receipt (everything except the signature), used for signing.
ChioScope
What a capability token authorizes.
CompleteOperation
Completion payload for prompt arguments or resource templates.
CompletionArgument
In-progress argument being completed.
CompletionResult
Completion result payload.
CreateElicitationResult
Result payload returned by a client-side elicitation request.
CreateMessageOperation
Normalized payload for an MCP sampling/createMessage child request.
CreateMessageResult
Result payload returned by a client-side sampling request.
CreditBacktestQuery
CreditBacktestReport
CreditBacktestSummary
CreditBacktestWindow
CreditBondArtifact
CreditBondFinding
CreditBondListQuery
CreditBondListReport
CreditBondListSummary
CreditBondPrerequisites
CreditBondReport
CreditBondRow
CreditBondSupportBoundary
CreditBondTerms
CreditBondedExecutionControlPolicy
CreditBondedExecutionEvaluation
CreditBondedExecutionFinding
CreditBondedExecutionSimulationDelta
CreditBondedExecutionSimulationQuery
CreditBondedExecutionSimulationReport
CreditBondedExecutionSimulationRequest
CreditBondedExecutionSupportBoundary
CreditCertificationState
CreditFacilityArtifact
CreditFacilityFinding
CreditFacilityListQuery
CreditFacilityListReport
CreditFacilityListSummary
CreditFacilityPrerequisites
CreditFacilityReport
CreditFacilityRow
CreditFacilitySupportBoundary
CreditFacilityTerms
CreditLossLifecycleArtifact
CreditLossLifecycleFinding
CreditLossLifecycleListQuery
CreditLossLifecycleListReport
CreditLossLifecycleListSummary
CreditLossLifecycleQuery
CreditLossLifecycleReport
CreditLossLifecycleRow
CreditLossLifecycleSummary
CreditLossLifecycleSupportBoundary
CreditProviderFacilitySnapshot
CreditProviderRiskPackage
CreditProviderRiskPackageQuery
CreditProviderRiskPackageSupportBoundary
CreditRecentLossEntry
CreditRecentLossHistory
CreditRecentLossSummary
CreditRuntimeAssuranceState
CreditScorecardAnomaly
CreditScorecardDimension
CreditScorecardEvidenceReference
CreditScorecardProbationStatus
CreditScorecardReport
CreditScorecardReputationContext
CreditScorecardSummary
CreditScorecardSupportBoundary
DelegationLink
A link in the delegation chain, recording that delegator granted a narrowed capability to delegatee.
DelegationLinkBody
The body of a delegation link, used as the signing input.
EnterpriseIdentityContext
ExposureLedgerCurrencyPosition
ExposureLedgerDecisionEntry
ExposureLedgerEvidenceReference
ExposureLedgerQuery
ExposureLedgerReceiptEntry
ExposureLedgerReport
ExposureLedgerSummary
ExposureLedgerSupportBoundary
FederatedOpenAdmissionPolicyArtifact
FederatedReputationClearingArtifact
FederatedReputationInputReference
FederatedStakeRequirement
FederatedSybilControl
FederationActivationExchangeArtifact
FederationAntiEclipsePolicy
FederationArtifactReference
FederationConflictEvidence
FederationDelegationControl
FederationImportControl
FederationPublisherObservation
FederationQualificationCase
FederationQualificationMatrix
FederationQuorumReport
FederationTrustScope
FinancialReceiptMetadata
Financial metadata attached to receipts for monetary grant invocations.
GenericGovernanceAuthorityScope
GenericGovernanceCaseArtifact
GenericGovernanceCaseEvaluation
GenericGovernanceCaseEvaluationRequest
GenericGovernanceCaseIssueRequest
GenericGovernanceCharterArtifact
GenericGovernanceCharterIssueRequest
GenericGovernanceEvidenceReference
GenericGovernanceFinding
GenericListingArtifact
GenericListingBoundary
GenericListingCompatibilityReference
GenericListingDivergence
GenericListingFreshnessWindow
GenericListingQuery
GenericListingReplicaFreshness
GenericListingReport
GenericListingSearchError
GenericListingSearchPolicy
GenericListingSearchResponse
GenericListingSearchResult
GenericListingSubject
GenericListingSummary
GenericNamespaceArtifact
GenericNamespaceOwnership
GenericRegistryPublisher
GenericTrustActivationArtifact
GenericTrustActivationEligibility
GenericTrustActivationEvaluation
GenericTrustActivationEvaluationRequest
GenericTrustActivationFinding
GenericTrustActivationIssueRequest
GenericTrustActivationReviewContext
GetPromptOperation
Prompt retrieval payload.
GovernedApprovalReceiptMetadata
Approval evidence attached to a governed-transaction receipt block.
GovernedApprovalToken
Signed approval artifact bound to one governed intent and one request.
GovernedApprovalTokenBody
Signable body of a governed approval token.
GovernedCallChainContext
Delegated call-chain context bound into a governed request.
GovernedCommerceContext
Seller-scoped commerce approval context attached to a governed request.
GovernedCommerceReceiptMetadata
Commerce approval evidence attached to a governed-transaction receipt block.
GovernedTransactionIntent
Canonical intent attached to a governed transaction request.
GovernedTransactionReceiptMetadata
Governed transaction metadata attached to receipts.
GuardEvidence
Evidence from a single guard’s evaluation.
Hash
A 32-byte hash value.
Keypair
Ed25519 keypair for signing.
LiabilityAutoBindDecisionArtifact
LiabilityAutoBindFinding
LiabilityBoundCoverageArtifact
LiabilityClaimAdjudicationArtifact
LiabilityClaimDisputeArtifact
LiabilityClaimEvidenceReference
LiabilityClaimPackageArtifact
LiabilityClaimPayoutInstructionArtifact
LiabilityClaimPayoutReceiptArtifact
LiabilityClaimResponseArtifact
LiabilityClaimSettlementInstructionArtifact
LiabilityClaimSettlementReceiptArtifact
LiabilityClaimSettlementRoleBinding
LiabilityClaimSettlementRoleTopology
LiabilityClaimWorkflowQuery
LiabilityClaimWorkflowReport
LiabilityClaimWorkflowRow
LiabilityClaimWorkflowSummary
LiabilityJurisdictionPolicy
LiabilityMarketWorkflowQuery
LiabilityMarketWorkflowReport
LiabilityMarketWorkflowRow
LiabilityMarketWorkflowSummary
LiabilityPlacementArtifact
LiabilityPricingAuthorityArtifact
LiabilityPricingAuthorityEnvelope
LiabilityProviderArtifact
LiabilityProviderListQuery
LiabilityProviderListReport
LiabilityProviderListSummary
LiabilityProviderPolicyReference
LiabilityProviderProvenance
LiabilityProviderReport
LiabilityProviderResolutionQuery
LiabilityProviderResolutionReport
LiabilityProviderRow
LiabilityProviderSupportBoundary
LiabilityQuoteRequestArtifact
LiabilityQuoteResponseArtifact
LiabilityQuoteTerms
MerkleProof
Merkle inclusion proof.
MerkleTree
RFC 6962-compatible Merkle tree.
MeteredBillingContext
Generic metered-billing context attached to a governed request.
MeteredBillingQuote
Stable quote describing pre-execution metered billing expectations.
MeteredBillingReceiptMetadata
Metered-billing quote and evidence context preserved on governed receipts.
MeteredUsageEvidenceReceiptMetadata
Optional post-execution usage evidence attached to metered-billing receipts.
MonetaryAmount
A monetary amount with currency denomination.
OpenMarketBondRequirement
OpenMarketEconomicsScope
OpenMarketEvidenceReference
OpenMarketFeeScheduleArtifact
OpenMarketFeeScheduleIssueRequest
OpenMarketFinding
OpenMarketPenaltyArtifact
OpenMarketPenaltyEvaluation
OpenMarketPenaltyEvaluationRequest
OpenMarketPenaltyIssueRequest
OperationContext
Session-scoped metadata attached to every normalized operation.
OracleConversionEvidence
PromptArgument
Prompt argument metadata.
PromptDefinition
Prompt metadata exposed through the session layer.
PromptGrant
Authorization for retrieving a prompt by name.
PromptMessage
Message inside a prompt response.
PromptResult
Prompt retrieval result.
PublicKey
Public key for verifying Chio signatures.
ReadResourceOperation
Resource read payload.
RequestId
Opaque identifier for a request scoped to a session.
ResolvedRuntimeAssurance
ResourceContent
Resource content payload returned by a read request.
ResourceDefinition
Resource metadata exposed through the session layer.
ResourceGrant
Authorization for reading or subscribing to a resource.
ResourceTemplateDefinition
Parameterized resource template metadata.
RootDefinition
Root metadata exposed by the client to bound filesystem access.
RuntimeAttestationAppraisal
RuntimeAttestationAppraisalArtifact
RuntimeAttestationAppraisalArtifactInventory
RuntimeAttestationAppraisalArtifactInventoryEntry
RuntimeAttestationAppraisalImportOutcome
RuntimeAttestationAppraisalImportReport
RuntimeAttestationAppraisalImportRequest
RuntimeAttestationAppraisalReason
RuntimeAttestationAppraisalReport
RuntimeAttestationAppraisalRequest
RuntimeAttestationAppraisalResult
RuntimeAttestationAppraisalResultExportRequest
RuntimeAttestationAppraisalResultSubject
RuntimeAttestationClaimSets
RuntimeAttestationEvidence
Normalized runtime attestation evidence carried with governed requests.
RuntimeAttestationEvidenceDescriptor
RuntimeAttestationImportReason
RuntimeAttestationImportedAppraisalPolicy
RuntimeAttestationNormalizedClaim
RuntimeAttestationNormalizedClaimVocabulary
RuntimeAttestationNormalizedClaimVocabularyEntry
RuntimeAttestationPolicyOutcome
RuntimeAttestationPolicyProjection
RuntimeAttestationReasonTaxonomy
RuntimeAttestationVerifierDescriptor
SamplingMessage
Message content submitted for client-side sampling.
SamplingTool
Tool schema advertised to a client during a sampling request.
SamplingToolChoice
Controls whether tool use is allowed during client-side sampling.
SessionAuthContext
Normalized transport-authentication context bound to a logical session.
SessionId
Opaque identifier for a logical runtime session.
Signature
Signature produced by an Chio SigningBackend.
SignedWeb3IdentityBinding
ToolAnnotations
Behavioral annotations that help the Kernel make policy and scheduling decisions without inspecting the tool implementation.
ToolCallAction
Describes the tool call that was evaluated.
ToolCallOperation
Normalized tool call payload. This is transport-agnostic and suitable for direct kernel evaluation.
ToolDefinition
A single tool offered by a server.
ToolGrant
Authorization for a single tool on a single server.
ToolManifest
A Chio tool server manifest. Signed by the server’s Ed25519 key.
ToolManifestBody
The body of a manifest (everything except the signature), used for signing.
UnderwritingAppealCreateRequest
UnderwritingAppealRecord
UnderwritingAppealResolveRequest
UnderwritingBudgetRecommendation
UnderwritingCertificationEvidence
UnderwritingDecisionArtifact
UnderwritingDecisionFinding
UnderwritingDecisionListReport
UnderwritingDecisionPolicy
UnderwritingDecisionQuery
UnderwritingDecisionReport
UnderwritingDecisionRow
UnderwritingDecisionSummary
UnderwritingEvidenceReference
UnderwritingPolicyInput
UnderwritingPolicyInputQuery
UnderwritingPremiumQuote
UnderwritingReceiptEvidence
UnderwritingReputationEvidence
UnderwritingRiskTaxonomy
UnderwritingRuntimeAssuranceEvidence
UnderwritingSignal
UnderwritingSimulationDelta
UnderwritingSimulationReport
UnderwritingSimulationRequest
Web3BindingTarget
Web3BitcoinAnchor
Web3ChainAnchorRecord
Web3ChainConfiguration
Web3ChainDeployment
Web3ChainFinalityRule
Web3ChainGasProfile
Web3CheckpointStatement
Web3ContractInterface
Web3ContractPackage
Web3DisputeWindow
Web3IdentityBindingCertificate
Web3QualificationCase
Web3QualificationMatrix
Web3ReceiptInclusion
Web3RegulatedRoleAssumption
Web3SettlementDispatchArtifact
Web3SettlementExecutionReceiptArtifact
Web3SettlementSupportBoundary
Web3SuperRootInclusion
Web3TrustProfile
WorkloadIdentity
Normalized workload identity derived from runtime attestation evidence.

Enums§

AgentMessage
Messages sent from the Agent to the Kernel.
Attenuation
Describes how a scope was narrowed during delegation.
AttestationTrustError
AttestationVerifierFamily
AutonomousAuthorityEnvelopeKind
AutonomousAutomationMode
AutonomousComparisonDisposition
AutonomousDecisionReviewState
AutonomousDriftKind
AutonomousDriftSeverity
AutonomousEvidenceKind
AutonomousExecutionAction
AutonomousExecutionLifecycleState
AutonomousPricingAction
AutonomousPricingDisposition
AutonomousPricingExplanationDirection
AutonomousQualificationOutcome
AutonomousRollbackAction
AutonomousSafeState
AutonomyContractError
CapitalAllocationDecisionOutcome
CapitalAllocationDecisionReasonCode
CapitalBookEventKind
CapitalBookEvidenceKind
CapitalBookRole
CapitalBookSourceKind
CapitalExecutionInstructionAction
CapitalExecutionIntendedState
CapitalExecutionRailKind
CapitalExecutionReconciledState
CapitalExecutionRole
CapitalOptimizationAction
CapitalPoolSimulationMode
CompletionReference
Reference target for an MCP-style completion request.
Constraint
A constraint on tool parameters.
CreateElicitationOperation
Normalized payload for an MCP elicitation/create child request.
CreditBacktestReasonCode
CreditBondDisposition
CreditBondLifecycleState
CreditBondReasonCode
CreditBondedExecutionDecision
CreditBondedExecutionFindingCode
CreditFacilityCapitalSource
CreditFacilityDisposition
CreditFacilityLifecycleState
CreditFacilityReasonCode
CreditLossLifecycleEventKind
CreditLossLifecycleReasonCode
CreditReserveControlAppealState
CreditReserveControlExecutionState
CreditScorecardAnomalySeverity
CreditScorecardBand
CreditScorecardConfidence
CreditScorecardDimensionKind
CreditScorecardEvidenceKind
CreditScorecardReasonCode
Decision
The Kernel’s verdict on a tool call.
ElicitationAction
Action selected by the client during an elicitation flow.
EnterpriseFederationMethod
Error
All errors produced by chio-core.
ExposureLedgerEvidenceKind
FederatedReputationInputKind
FederationArtifactKind
FederationContractError
FederationQualificationOutcome
FederationQuorumState
FederationScenarioKind
GenericGovernanceCaseKind
GenericGovernanceCaseState
GenericGovernanceEffectiveState
GenericGovernanceEvidenceKind
GenericGovernanceFindingCode
GenericListingActorKind
GenericListingFreshnessState
GenericListingStatus
GenericNamespaceLifecycleState
GenericRegistryPublisherRole
GenericTrustActivationDisposition
GenericTrustActivationFindingCode
GenericTrustAdmissionClass
GovernedApprovalDecision
Decision encoded by a governed approval token.
KernelMessage
Messages sent from the Kernel to the Agent.
LiabilityAutoBindDisposition
LiabilityAutoBindReasonCode
LiabilityClaimAdjudicationOutcome
LiabilityClaimEvidenceKind
LiabilityClaimPayoutReconciliationState
LiabilityClaimResponseDisposition
LiabilityClaimSettlementKind
LiabilityClaimSettlementReconciliationState
LiabilityCoverageClass
LiabilityEvidenceRequirement
LiabilityPricingAuthorityEnvelopeKind
LiabilityProviderLifecycleState
LiabilityProviderType
LiabilityQuoteDisposition
MeteredSettlementMode
Policy-visible settlement posture for quoted metered billing.
OpenMarketAbuseClass
OpenMarketBondClass
OpenMarketCollateralReferenceKind
OpenMarketEvidenceKind
OpenMarketFindingCode
OpenMarketPenaltyAction
OpenMarketPenaltyEffectiveState
OpenMarketPenaltyState
Operation
An operation that can be performed under a grant.
OperationKind
Normalized operation kind, independent of edge framing.
OperationTerminalState
Terminal runtime state for a session-scoped request.
ProgressToken
Token used to correlate progress updates to a request.
RuntimeAssuranceTier
Explicit operator-visible runtime assurance tier derived from attestation.
RuntimeAttestationAppraisalError
RuntimeAttestationAppraisalReasonCode
RuntimeAttestationAppraisalReasonDisposition
RuntimeAttestationAppraisalReasonGroup
RuntimeAttestationAppraisalVerdict
RuntimeAttestationClaimProvenance
RuntimeAttestationImportDisposition
RuntimeAttestationImportReasonCode
RuntimeAttestationNormalizedClaimCategory
RuntimeAttestationNormalizedClaimCode
RuntimeAttestationNormalizedClaimConfidence
RuntimeAttestationNormalizedClaimFreshness
SessionAuthMethod
Authentication method used to admit a session at the transport layer.
SessionOperation
Higher-level operations the runtime can evaluate within a session.
SessionTransport
Transport family that owns a logical runtime session.
ToolCallError
Errors that can occur during tool call processing.
ToolCallResult
The outcome of a tool call: either a successful result value or an error.
TrustLevel
Trust level of a receipt’s authorization, recording HOW the Kernel participated in the evaluation. Captured per-receipt so downstream consumers (audit, regulatory, dashboards) can reason about the strength of mediation that produced each authorization.
UnderwritingAppealResolution
UnderwritingAppealStatus
UnderwritingBudgetAction
UnderwritingCertificationState
UnderwritingDecisionLifecycleState
UnderwritingDecisionOutcome
UnderwritingDecisionReasonCode
UnderwritingEvidenceKind
UnderwritingPremiumState
UnderwritingReasonCode
UnderwritingRemediation
UnderwritingReviewState
UnderwritingRiskClass
Web3BindingLanguage
Web3ChainRole
Web3ContractError
Web3ContractKind
Web3DisputePolicy
Web3FinalityMode
Web3KeyBindingPurpose
Web3QualificationOutcome
Web3RegulatedRole
Web3SettlementLifecycleState
Web3SettlementPath
WorkloadCredentialKind
Upstream credential family that bound the workload identity to attestation.
WorkloadIdentityError
WorkloadIdentityScheme
Normalized workload-identity scheme accepted by Chio runtime attestation.

Constants§

AWS_NITRO_ATTESTATION_SCHEMA
AWS_NITRO_VERIFIER_ADAPTER
AZURE_MAA_ATTESTATION_SCHEMA
AZURE_MAA_VERIFIER_ADAPTER
CAPITAL_ALLOCATION_DECISION_ARTIFACT_SCHEMA
CAPITAL_BOOK_REPORT_SCHEMA
CAPITAL_EXECUTION_INSTRUCTION_ARTIFACT_SCHEMA
CHIO_ANCHOR_INCLUSION_PROOF_SCHEMA
CHIO_AUTONOMOUS_COMPARISON_REPORT_SCHEMA
CHIO_AUTONOMOUS_DRIFT_REPORT_SCHEMA
CHIO_AUTONOMOUS_EXECUTION_DECISION_SCHEMA
CHIO_AUTONOMOUS_PRICING_AUTHORITY_ENVELOPE_SCHEMA
CHIO_AUTONOMOUS_PRICING_DECISION_SCHEMA
CHIO_AUTONOMOUS_PRICING_INPUT_SCHEMA
CHIO_AUTONOMOUS_QUALIFICATION_MATRIX_SCHEMA
CHIO_AUTONOMOUS_ROLLBACK_PLAN_SCHEMA
CHIO_CAPITAL_POOL_OPTIMIZATION_SCHEMA
CHIO_CAPITAL_POOL_SIMULATION_REPORT_SCHEMA
CHIO_CHECKPOINT_STATEMENT_SCHEMA
CHIO_FEDERATION_ACTIVATION_EXCHANGE_SCHEMA
CHIO_FEDERATION_OPEN_ADMISSION_POLICY_SCHEMA
CHIO_FEDERATION_QUALIFICATION_MATRIX_SCHEMA
CHIO_FEDERATION_QUORUM_REPORT_SCHEMA
CHIO_FEDERATION_REPUTATION_CLEARING_SCHEMA
CHIO_KEY_BINDING_CERTIFICATE_SCHEMA
CHIO_ORACLE_CONVERSION_EVIDENCE_SCHEMA
CHIO_WEB3_CHAIN_CONFIGURATION_SCHEMA
CHIO_WEB3_CONTRACT_PACKAGE_SCHEMA
CHIO_WEB3_QUALIFICATION_MATRIX_SCHEMA
CHIO_WEB3_SETTLEMENT_DISPATCH_SCHEMA
CHIO_WEB3_SETTLEMENT_RECEIPT_SCHEMA
CHIO_WEB3_TRUST_PROFILE_SCHEMA
CREDIT_BACKTEST_REPORT_SCHEMA
CREDIT_BONDED_EXECUTION_SIMULATION_REPORT_SCHEMA
CREDIT_BOND_ARTIFACT_SCHEMA
CREDIT_BOND_LIST_REPORT_SCHEMA
CREDIT_BOND_REPORT_SCHEMA
CREDIT_FACILITY_ARTIFACT_SCHEMA
CREDIT_FACILITY_LIST_REPORT_SCHEMA
CREDIT_FACILITY_REPORT_SCHEMA
CREDIT_LOSS_LIFECYCLE_ARTIFACT_SCHEMA
CREDIT_LOSS_LIFECYCLE_LIST_REPORT_SCHEMA
CREDIT_LOSS_LIFECYCLE_REPORT_SCHEMA
CREDIT_PROVIDER_RISK_PACKAGE_SCHEMA
CREDIT_SCORECARD_SCHEMA
DEFAULT_GENERIC_LISTING_REPORT_MAX_AGE_SECS
EXPOSURE_LEDGER_SCHEMA
GENERIC_GOVERNANCE_CASE_ARTIFACT_SCHEMA
GENERIC_GOVERNANCE_CHARTER_ARTIFACT_SCHEMA
GENERIC_LISTING_ARTIFACT_SCHEMA
GENERIC_LISTING_NETWORK_SEARCH_SCHEMA
GENERIC_LISTING_REPORT_SCHEMA
GENERIC_LISTING_SEARCH_ALGORITHM_V1
GENERIC_NAMESPACE_ARTIFACT_SCHEMA
GENERIC_TRUST_ACTIVATION_ARTIFACT_SCHEMA
GOOGLE_CONFIDENTIAL_VM_ATTESTATION_SCHEMA
GOOGLE_CONFIDENTIAL_VM_VERIFIER_ADAPTER
LIABILITY_AUTO_BIND_DECISION_ARTIFACT_SCHEMA
LIABILITY_BOUND_COVERAGE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_ADJUDICATION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_DISPUTE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PACKAGE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PAYOUT_INSTRUCTION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PAYOUT_RECEIPT_ARTIFACT_SCHEMA
LIABILITY_CLAIM_RESPONSE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_SETTLEMENT_INSTRUCTION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_SETTLEMENT_RECEIPT_ARTIFACT_SCHEMA
LIABILITY_CLAIM_WORKFLOW_REPORT_SCHEMA
LIABILITY_MARKET_WORKFLOW_REPORT_SCHEMA
LIABILITY_PLACEMENT_ARTIFACT_SCHEMA
LIABILITY_PRICING_AUTHORITY_ARTIFACT_SCHEMA
LIABILITY_PROVIDER_ARTIFACT_SCHEMA
LIABILITY_PROVIDER_LIST_REPORT_SCHEMA
LIABILITY_PROVIDER_RESOLUTION_REPORT_SCHEMA
LIABILITY_QUOTE_REQUEST_ARTIFACT_SCHEMA
LIABILITY_QUOTE_RESPONSE_ARTIFACT_SCHEMA
MAX_CREDIT_BACKTEST_WINDOW_LIMIT
MAX_CREDIT_BOND_LIST_LIMIT
MAX_CREDIT_FACILITY_LIST_LIMIT
MAX_CREDIT_LOSS_LIFECYCLE_LIST_LIMIT
MAX_CREDIT_PROVIDER_LOSS_LIMIT
MAX_EXPOSURE_LEDGER_DECISION_LIMIT
MAX_EXPOSURE_LEDGER_RECEIPT_LIMIT
MAX_GENERIC_LISTING_LIMIT
MAX_LIABILITY_CLAIM_WORKFLOW_LIMIT
MAX_LIABILITY_MARKET_WORKFLOW_LIMIT
MAX_LIABILITY_PROVIDER_LIST_LIMIT
MAX_UNDERWRITING_DECISION_LIMIT
MAX_UNDERWRITING_RECEIPT_LIMIT
OPEN_MARKET_FEE_SCHEDULE_ARTIFACT_SCHEMA
OPEN_MARKET_PENALTY_ARTIFACT_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_ARTIFACT_INVENTORY_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_ARTIFACT_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_IMPORT_REPORT_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_REPORT_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_RESULT_SCHEMA
RUNTIME_ATTESTATION_APPRAISAL_SCHEMA
RUNTIME_ATTESTATION_NORMALIZED_CLAIM_VOCABULARY_SCHEMA
RUNTIME_ATTESTATION_REASON_TAXONOMY_SCHEMA
UNDERWRITING_APPEAL_SCHEMA
UNDERWRITING_DECISION_ARTIFACT_SCHEMA
UNDERWRITING_DECISION_POLICY_SCHEMA
UNDERWRITING_DECISION_POLICY_VERSION
UNDERWRITING_DECISION_REPORT_SCHEMA
UNDERWRITING_POLICY_INPUT_SCHEMA
UNDERWRITING_RISK_TAXONOMY_VERSION
UNDERWRITING_SIMULATION_REPORT_SCHEMA

Functions§

aggregate_generic_listing_reports
build_generic_governance_case_artifact
build_generic_governance_charter_artifact
build_generic_trust_activation_artifact
build_open_market_fee_schedule_artifact
build_open_market_penalty_artifact
build_underwriting_decision_artifact
canonical_json_bytes
Serialize a value to canonical JSON bytes (RFC 8785).
canonical_json_string
Serialize a value to a canonical JSON string (RFC 8785).
canonicalize
Canonicalize a serde_json::Value to an RFC 8785 string.
derive_runtime_attestation_appraisal
ensure_generic_listing_namespace_consistency
evaluate_generic_governance_case
evaluate_generic_trust_activation
evaluate_imported_runtime_attestation_appraisal
evaluate_open_market_penalty
evaluate_underwriting_policy_input
normalize_namespace
runtime_attestation_appraisal_artifact_inventory
runtime_attestation_normalized_claim_vocabulary
runtime_attestation_reason_taxonomy
sha256
Compute SHA-256 hash of data.
sha256_hex
Compute SHA-256 of the given bytes, returning the hash as lowercase hex.
validate_anchor_inclusion_proof
validate_attenuation
Validate that a child scope is a valid attenuation of a parent scope.
validate_autonomous_comparison_report
validate_autonomous_drift_report
validate_autonomous_execution_decision
validate_autonomous_pricing_authority_envelope
validate_autonomous_pricing_decision
validate_autonomous_pricing_input
validate_autonomous_qualification_matrix
validate_autonomous_rollback_plan
validate_capital_pool_optimization
validate_capital_pool_simulation_report
validate_delegation_chain
Validate an entire delegation chain.
validate_federated_open_admission_policy
validate_federated_reputation_clearing
validate_federation_activation_exchange
validate_federation_qualification_matrix
validate_federation_quorum_report
validate_oracle_conversion_evidence
validate_web3_chain_configuration
validate_web3_contract_package
validate_web3_identity_binding
validate_web3_qualification_matrix
validate_web3_settlement_dispatch
validate_web3_settlement_execution_receipt
validate_web3_trust_profile
verifier_family_for_attestation_schema
verify_anchor_inclusion_proof
verify_checkpoint_statement
verify_web3_identity_binding

Type Aliases§

AgentId
Opaque agent identifier. In practice this is a hex-encoded Ed25519 public key or a SPIFFE URI, but the core treats it as an opaque string.
CapabilityId
UUIDv7 capability identifier (time-ordered).
ServerId
Opaque tool server identifier.
SignedAutonomousComparisonReport
SignedAutonomousDriftReport
SignedAutonomousExecutionDecision
SignedAutonomousPricingAuthorityEnvelope
SignedAutonomousPricingDecision
SignedAutonomousPricingInput
SignedAutonomousRollbackPlan
SignedCapitalAllocationDecision
SignedCapitalBookReport
SignedCapitalExecutionInstruction
SignedCapitalPoolOptimization
SignedCapitalPoolSimulationReport
SignedCreditBond
SignedCreditFacility
SignedCreditLossLifecycle
SignedCreditProviderRiskPackage
SignedCreditScorecardReport
SignedExposureLedgerReport
SignedFederatedOpenAdmissionPolicy
SignedFederatedReputationClearing
SignedFederationActivationExchange
SignedFederationQualificationMatrix
SignedFederationQuorumReport
SignedGenericGovernanceCase
SignedGenericGovernanceCharter
SignedGenericListing
SignedGenericNamespace
SignedGenericTrustActivation
SignedLiabilityAutoBindDecision
SignedLiabilityBoundCoverage
SignedLiabilityClaimAdjudication
SignedLiabilityClaimDispute
SignedLiabilityClaimPackage
SignedLiabilityClaimPayoutInstruction
SignedLiabilityClaimPayoutReceipt
SignedLiabilityClaimResponse
SignedLiabilityClaimSettlementInstruction
SignedLiabilityClaimSettlementReceipt
SignedLiabilityPlacement
SignedLiabilityPricingAuthority
SignedLiabilityProvider
SignedLiabilityQuoteRequest
SignedLiabilityQuoteResponse
SignedOpenMarketFeeSchedule
SignedOpenMarketPenalty
SignedRuntimeAttestationAppraisalReport
SignedRuntimeAttestationAppraisalResult
SignedUnderwritingDecision
SignedUnderwritingPolicyInput
SignedWeb3SettlementDispatch
SignedWeb3SettlementExecutionReceipt