Enum NotAuthoritativeReason 

pub enum NotAuthoritativeReason {
    ReceiptSignatureInvalid,
    SignerNotAdmitted,
    NotMediatedDecision,
    NotPreventBoundary,
    ObservationOutcomePresent,
    NotMediatedTrustLevel,
    NotAllowDecision,
    MissingBudgetAuthority,
    HoldNotReconciled,
    ExposureNotCommitted,
    NonceLinkMissing,
    NonceLinkMismatch,
    ReservedHoldMismatch,
    NonceBindingMismatch {
        field: &'static str,
    },
    NonceSignatureInvalid,
    MissingOrWrongMediatedSpendProfile,
    GuaranteeLevelBelowFloor {
        minimum: String,
        actual: String,
    },
    UnknownGuaranteeFloor {
        minimum: String,
    },
    UnknownGuaranteeLevel {
        actual: String,
    },
}

Distinct rejection reasons; each of the (a)-(f) conjunction fragments maps to at least one variant so a conformance matrix can flip them independently.

Variants

ReceiptSignatureInvalid

SignerNotAdmitted

NotMediatedDecision

NotPreventBoundary

ObservationOutcomePresent

NotMediatedTrustLevel

NotAllowDecision

MissingBudgetAuthority

HoldNotReconciled

ExposureNotCommitted

NonceLinkMissing

NonceLinkMismatch

ReservedHoldMismatch

The presented nonce cryptographically names a reserved budget hold that differs from the receipt’s committed budget_authority.hold_id. The nonce id links the two artifacts, but the hold the nonce reserved is not the hold this receipt settled, so the receipt is not authoritative for the presented nonce. Fail-closed on this cross-binding inconsistency.

NonceBindingMismatch

Fields

field: &'static str

NonceSignatureInvalid

MissingOrWrongMediatedSpendProfile

The receipt’s budget-authority block does not pin the frozen MEDIATED_SPEND_PROFILE, so its contract shape is unversioned or a different version than the consumer requires.

GuaranteeLevelBelowFloor

The receipt’s guarantee level is weaker than the operator-configured floor (R4 truthfulness). Unrelated to TrustLevel::Mediated.

Fields

minimum: String

actual: String

UnknownGuaranteeFloor

The operator-configured guarantee floor is not a recognized level, so it cannot be ranked. Fail-closed rather than admitting every receipt.

Fields

minimum: String

UnknownGuaranteeLevel

The receipt’s own guarantee level is not a recognized level, so its truthfulness claim cannot be ranked. An unrecognized level ranks as the weakest, which would silently clear the weakest valid floor; fail-closed instead so a typoed or forged level never passes as authoritative.

Fields

actual: String

Trait Implementations

impl Clone for NotAuthoritativeReason

fn clone(&self) -> NotAuthoritativeReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NotAuthoritativeReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for NotAuthoritativeReason

impl PartialEq for NotAuthoritativeReason

fn eq(&self, other: &NotAuthoritativeReason) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for NotAuthoritativeReason