Struct ProjectAttestation 

pub struct ProjectAttestation { /* private fields */ }

A project id whose provenance is cryptographic, ready to stamp onto a GatePrincipal with GatePrincipal::with_project.

Cross-crate sealing is not possible here: the daemon (another crate) is what verifies the sources, so this constructor has to be public. The guard is therefore by construction path, not by the compiler: the daemon’s VerifiedProject::attest is the only caller, a ClaimedProject has no route to it, and package I adds a grep test that no other site calls ProjectAttestation::from_verified. A same-uid process can still claim a project over the socket; this is an isolation guard between one user’s projects, not a boundary against a hostile local process.

Implementations

impl ProjectAttestation

pub fn from_verified( project_id: impl Into<String>, source: AttestSource, ) -> Self

Wrap a project id the caller has ALREADY verified from source. Never call this with a client-supplied Request.project.

pub fn project_id(&self) -> &str

The verified project id.

pub fn source(&self) -> AttestSource

Which verified source produced it.

Trait Implementations

impl Clone for ProjectAttestation

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProjectAttestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ProjectAttestation

impl PartialEq for ProjectAttestation

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ProjectAttestation