Struct ModelCard 

pub struct ModelCard {
    pub card_version: String,
    pub weights_hash: String,
    pub allowed_capability_set: StringSet,
    pub banned_tools: StringSet,
    pub training_data_class: String,
    pub issuer: String,
    pub issued_at: DateTime<Utc>,
    pub expires_at: DateTime<Utc>,
}

Signed declaration binding a model’s loaded weights to a permitted capability set, banned tools, and a training-data class.

Schema locked at spec/schemas/model-card.v1.json. Canonical-JSON encoding (RFC 8785 / JCS) is the on-the-wire byte form that cosign signatures are taken over; the serde field declaration order is therefore irrelevant to the hashed bytes.

Fields

card_version: String

Schema version. MUST be CARD_VERSION_V1 for v1 cards; any other value rejects at validation.

weights_hash: String

Lowercase 64-character hexadecimal SHA-256 digest of the canonical weights blob.

allowed_capability_set: StringSet

Capability scopes the kernel is permitted to grant against a provider bound under this card.

banned_tools: StringSet

Tool identifiers the kernel MUST NOT route to under this card.

training_data_class: String

Coarse-grained training-data classification (free-form).

issuer: String

Logical issuer identity (URI / OIDC subject / SAN).

issued_at: DateTime<Utc>

RFC 3339 UTC timestamp at which the issuer minted this card.

expires_at: DateTime<Utc>

RFC 3339 UTC timestamp at which this card expires.

Implementations

impl ModelCard

pub fn new( weights_hash: impl Into<String>, allowed_capability_set: StringSet, banned_tools: StringSet, training_data_class: impl Into<String>, issuer: impl Into<String>, issued_at: DateTime<Utc>, expires_at: DateTime<Utc>, ) -> Result<Self, WeightsError>

Build a v1 model card. Performs structural validation; returns a WeightsError if any required invariant is violated.

Validated invariants:

• weights_hash is a 64-character lowercase hexadecimal string.
• training_data_class is non-empty.
• issuer is non-empty.
• expires_at >= issued_at.

pub fn validate(&self) -> Result<(), WeightsError>

Re-run structural validation. Called by Self::new and exposed for post-deserialisation use.

pub fn require_live(&self, now: DateTime<Utc>) -> Result<(), WeightsError>

Verifier-side liveness check.

pub fn to_canonical_json(&self) -> Result<Vec<u8>, WeightsError>

Encode to canonical JSON bytes (RFC 8785 / JCS). Deterministic across any compliant implementation.

pub fn from_canonical_json(bytes: &[u8]) -> Result<Self, WeightsError>

Decode from canonical JSON bytes. Round-trip with Self::to_canonical_json. Validates after deserialisation.

Trait Implementations

impl Clone for ModelCard

fn clone(&self) -> ModelCard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ModelCard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ModelCard

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ModelCard

impl PartialEq for ModelCard

fn eq(&self, other: &ModelCard) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ModelCard

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ModelCard