Enum BudgetSplitError 

pub enum BudgetSplitError {
    ChildShareExceedsCap {
        child_id: String,
        share_bps: u16,
    },
    OversubscribedSiblings {
        child_id: String,
        share_bps: u16,
        current_total_child_bps: u32,
        parent_share_bps: u16,
    },
    UnknownParent {
        parent_token_id: String,
    },
    DuplicateChild {
        child_id: String,
    },
    ReleaseShareMismatch {
        child_id: String,
        expected_share_bps: u16,
        actual_share_bps: u16,
    },
}

Errors raised by BudgetSplit admission and release operations.

Variants

ChildShareExceedsCap

The proposed child share alone exceeds the per-token cap of MAX_BUDGET_SHARE_BPS. Per-token validation usually catches this first; the registry repeats the check so a bypass cannot widen the surface.

Fields

child_id: String

The child capability ID that was rejected.

share_bps: u16

The proposed child share in basis points.

OversubscribedSiblings

Admitting this child would push the sum of sibling shares past the parent’s own share. The first sibling that hits this branch is rejected; previously admitted siblings are not retroactively evicted.

Fields

child_id: String

The child capability ID that was rejected.

share_bps: u16

The proposed child share in basis points.

current_total_child_bps: u32

The sum of already-admitted siblings, in basis points.

parent_share_bps: u16

The parent’s own share, in basis points.

UnknownParent

The parent token is unknown to the registry. This happens when the verifier sees a delegation chain whose root was never registered, or after a parent has been evicted.

Fields

parent_token_id: String

The parent capability ID that was looked up.

DuplicateChild

The child token has already been admitted under this parent. The registry is idempotent: re-admitting the same child with the same share takes an additional holder lease on the existing edge and succeeds, but a different share is a hard failure because it would let an attacker rewrite the split after the fact.

Fields

child_id: String

The child capability ID that was already present.

ReleaseShareMismatch

The release path was asked to remove a child with a different share than the one originally admitted. This is a hard failure because it means the caller is no longer unwinding the same delegation edge.

Fields

child_id: String

The child capability ID whose admitted share differed.

expected_share_bps: u16

The share supplied by the caller during release.

actual_share_bps: u16

The share recorded during admission.

Trait Implementations

impl Clone for BudgetSplitError

fn clone(&self) -> BudgetSplitError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BudgetSplitError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for BudgetSplitError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for BudgetSplitError

impl From<BudgetSplitError> for CapabilityError

fn from(err: BudgetSplitError) -> Self

Converts to this type from the input type.

impl PartialEq for BudgetSplitError

fn eq(&self, other: &BudgetSplitError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for BudgetSplitError