Skip to main content

VerifiedCapability

chio_kernel_core::capability_verify

Struct VerifiedCapability

pub struct VerifiedCapability {
    pub id: String,
    pub subject_hex: String,
    pub issuer_hex: String,
    pub scope: ChioScope,
    pub issued_at: u64,
    pub expires_at: u64,
    pub evaluated_at: u64,
}

Expand description

The subset of a verified capability that portable callers actually need.

This deliberately excludes mutable kernel state (budget counters, revocation membership) and avoids returning a reference into the token so adapters that drop the token after verification can still act on the captured scope.

Fields§

§id: String

The capability ID.

§subject_hex: String

The subject hex-encoded public key.

§issuer_hex: String

The issuer hex-encoded public key.

§scope: ChioScope

The authorized scope.

§issued_at: u64

issued_at timestamp (Unix seconds).

§expires_at: u64

expires_at timestamp (Unix seconds).

§evaluated_at: u64

The clock value used for time-bound enforcement.

Implementations§

impl VerifiedCapability

pub fn normalized( &self, ) -> Result<NormalizedVerifiedCapability, NormalizationError>

Project this verification result into the proof-facing normalized AST.

Trait Implementations§

impl Clone for VerifiedCapability

fn clone(&self) -> VerifiedCapability

Returns a duplicate of the value. Read more

1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

impl Debug for VerifiedCapability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl TryFrom<&VerifiedCapability> for NormalizedVerifiedCapability

type Error = NormalizationError

The type returned in the event of a conversion error.

fn try_from(verified: &VerifiedCapability) -> Result<Self, Self::Error>

Performs the conversion.

Auto Trait Implementations§

impl Freeze for VerifiedCapability

impl RefUnwindSafe for VerifiedCapability

impl Send for VerifiedCapability

impl Sync for VerifiedCapability

impl Unpin for VerifiedCapability

impl UnsafeUnpin for VerifiedCapability

impl UnwindSafe for VerifiedCapability

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> CloneToUninit for T
where T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T> Same for T

type Output = T

Should always be Self

impl<T> ToOwned for T
where T: Clone,

type Owned = T

The resulting type after obtaining ownership.

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.