Struct DelegationLink 

pub struct DelegationLink {
    pub capability_id: String,
    pub delegator: PublicKey,
    pub delegatee: PublicKey,
    pub attenuations: Vec<Attenuation>,
    pub timestamp: u64,
    pub scope_hash: Option<String>,
    pub aggregate_budget: Option<AggregateBudgetDelegationMarker>,
    pub cumulative_approval: Option<CumulativeApprovalDelegationMarker>,
    pub signature: Signature,
}

A link in the delegation chain, recording that delegator granted a narrowed capability to delegatee.

Delegation chain-binding: scope_hash records the hash of the canonical scope that the delegator authorized at this step. When set, it ties the delegation chain to the underlying capability lineage so a verifier can check proof.parent_scope_hash == chain.last().scope_hash and reject inflated parent-scope claims (the parent-scope-inflation soundness bug).

Links omit scope_hash; verifiers must reject attenuated tokens whose chain links lack this field via validate_delegation_chain_with_trust_root.

Fields

capability_id: String

Capability ID of the ancestor token delegated at this step.

delegator: PublicKey

Public key of the agent that delegated.

delegatee: PublicKey

Public key of the agent that received the delegation.

attenuations: Vec<Attenuation>

How the scope was narrowed in this delegation step.

timestamp: u64

Unix timestamp of the delegation.

scope_hash: Option<String>

Delegation chain-binding: SHA-256 hash of the canonical scope authorized at this hop. Absent on older links; verifiers can enforce presence via feature gate. Verifiers gated behind the delegation_chain_binding feature flag enforce that this matches the parent_scope_hash carried by the next hop.

aggregate_budget: Option<AggregateBudgetDelegationMarker>

Authenticated preservation marker for a delegation-family invocation budget.

cumulative_approval: Option<CumulativeApprovalDelegationMarker>

Authenticated preservation marker for cumulative approval root bindings.

signature: Signature

Ed25519 signature by the delegator over the canonical form of the other fields in this link.

Implementations

impl DelegationLink

pub fn sign( body: DelegationLinkBody, keypair: &Keypair, ) -> Result<DelegationLink, Error>

Sign a delegation link body.

pub fn body(&self) -> DelegationLinkBody

Extract the signable body.

pub fn verify_signature(&self) -> Result<bool, Error>

Verify this link’s signature against the delegator’s key.

Trait Implementations

impl Clone for DelegationLink

fn clone(&self) -> DelegationLink

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DelegationLink

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DelegationLink

fn deserialize<__D>( __deserializer: __D, ) -> Result<DelegationLink, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for DelegationLink

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.