Struct RevocationSnapshot 

pub struct RevocationSnapshot {
    pub epoch: u64,
    pub root_hash: [u8; 32],
    pub issued_at_unix_ms: u64,
    pub revoked: BTreeSet<RevocationViewSubject>,
}

Immutable snapshot of the revocation set at a particular epoch.

Snapshots are produced by the federation gossip task from the most recent verified signed epoch root and the leaf set the embedding kernel has materialised locally. Once installed in a RevocationView they are read-only; updates always go through a fresh RevocationView::install_if_newer call.

Fields

epoch: u64

Monotone epoch counter advertised by the carried signed root.

root_hash: [u8; 32]

Hash of the carried signed root. Verifiers use this for diagnostics (e.g. correlating a deny verdict with the snapshot it was evaluated against); the kernel-core itself does not re-verify it.

issued_at_unix_ms: u64

Unix milliseconds at which the carried signed root was issued. Verifiers MUST gate against their own freshness window before trusting the snapshot for fail-closed dispatch.

revoked: BTreeSet<RevocationViewSubject>

Sorted set of revoked subjects at this epoch. Ordered for deterministic equality and serialisation.

Implementations

impl RevocationSnapshot

pub fn empty() -> Self

The empty sentinel snapshot (epoch = 0, no subjects, issued at 0). Returned by RevocationView::new before any gossip update has installed a real epoch root.

pub fn is_revoked(&self, subject: &RevocationViewSubject) -> bool

Returns true when subject is present in the snapshot’s revocation set.

Trait Implementations

impl Clone for RevocationSnapshot

fn clone(&self) -> RevocationSnapshot

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RevocationSnapshot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RevocationSnapshot

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RevocationSnapshot

impl PartialEq for RevocationSnapshot

fn eq(&self, other: &RevocationSnapshot) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RevocationSnapshot

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RevocationSnapshot