Struct VerifyPolicy 

pub struct VerifyPolicy {
    pub accept_cognitum_release: bool,
    pub record_cog_toml_pins: Vec<String>,
}

Verification options.

Fields

accept_cognitum_release: bool

Opt in to the Cognitum ADR-154/155 release-record verifier. Off by default; when on, a valid record from a pinned Cognitum key that binds one of the package binaries counts as a signature.

record_cog_toml_pins: Vec<String>

BLAKE3 hashes of cog.toml files an operator has reviewed and pins for record-only trust. A Cognitum release record binds the cog id, version, source commit and binary digest but not the raw cog.toml, so a package trusted through a record alone is accepted only when its cog.toml hash is in this list. Operator-signed packages need no pin (the envelope signature covers cog.toml).

Trait Implementations

impl Clone for VerifyPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerifyPolicy

fn default() -> Self

Returns the “default value” for a type.