Struct CryptoGate 

pub struct CryptoGate { /* private fields */ }

Cryptographic admission: genesis pin, revocation, verdict, mode.

genesis_hash is a cluster label, not a credential: anyone who knows it can present it. Membership is the verdict source’s decision.

Implementations

impl CryptoGate

pub fn new( genesis: [u8; 32], revocations: Arc<RevocationList>, verdicts: Arc<dyn VerdictSource>, mode: MeshAdmissionMode, ) -> Self

Build a gate pinned to genesis.

pub fn with_ttl(self, ttl: Duration) -> Self

Override the verdict cache lifetime.

pub fn records(&self) -> Vec<AdmissionRecord>

Recent observe/refuse records, oldest first.

pub fn cache_len(&self) -> usize

Number of cached verdicts (for tests and diagnostics).

Trait Implementations

impl AdmissionGate for CryptoGate

fn strict(&self) -> bool

Only enforce bounds connections: observe must stay a no-op for legacy peers (quiet leaves, large NAT’d fleets).

fn is_revoked(&self, node_id: &str) -> bool

Under enforce, a revocation applies to live connections too; under observe it is recorded at the next admission only, as before.

fn admit<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, hello: &'life1 VerifiedHello, ctx: &'life2 AdmitContext, ) -> Pin<Box<dyn Future<Output = Admission> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

A hello verified; decide.

fn admit_unverified<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, failure: &'life1 HelloFailure, ctx: &'life2 AdmitContext, ) -> Pin<Box<dyn Future<Output = Admission> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

No hello, or it failed verification; decide.