Struct ConsentStore 

pub struct ConsentStore { /* private fields */ }

The set of consent decisions a host holds: a keyed table of legacy boolean ConsentRecords and an append-only ledger of scope-level ConsentReceipts (docs/context-reuse.md §3). Both are serde-able so a host can persist a user’s decisions — and the receipt ledger — across runs.

Implementations

impl ConsentStore

pub fn new() -> Self

pub fn record(&mut self, record: ConsentRecord)

Record (or replace) legacy boolean consent for a provider.

Stamps granted_at with the host clock when the caller left it unset. The field existed from the start and was never populated by anything — every consent decision the reference host recorded went into the ledger with no time on it, which is precisely the datum an audit needs (“when did I agree to this?”). Stamping at insertion is the one place that can answer honestly; a caller replaying a persisted decision keeps its original instant via ConsentRecord::granted_at.

pub fn record_receipt(&mut self, receipt: ConsentReceipt)

Append a scope-level consent receipt to the audit ledger. Append-only: this never removes or edits an earlier receipt (§3).

pub fn receipts(&self) -> &[ConsentReceipt]

The full append-only receipt ledger, in the order receipts were granted — the audit trail.

pub fn receipts_for<'a>( &'a self, provider_id: &'a str, ) -> impl Iterator<Item = &'a ConsentReceipt>

Every receipt recorded for a provider, in grant order.

pub fn has_receipt(&self, provider_id: &str, scope: &EgressScope) -> bool

Whether any recorded receipt authorizes scope for provider_id (presence, ignoring expiry). This is what the zero-clock runtime gate consults; a host that also enforces expiry uses live_receipt.

pub fn live_receipt( &self, provider_id: &str, scope: &EgressScope, now: &str, ) -> Option<&ConsentReceipt>

The receipt authorizing scope for provider_id that is live at now (presence and non-expiry), if any. A host enforcing expiry gates on this against its own clock (docs/context-reuse.md §3).

pub fn revoke(&mut self, provider_id: &str) -> Option<ConsentRecord>

Withdraw consent for a provider, returning the prior record if any.

pub fn get(&self, provider_id: &str) -> Option<&ConsentRecord>

The recorded decision for a provider, if consent was granted.

pub fn is_consented(&self, provider_id: &str) -> bool

Whether consent has been recorded for a provider.

pub fn requires_consent(info: &ProviderInfo) -> bool

Whether a provider needs consent before any query: a provider needs it if it declares the boolean egress flag or any off-machine egress scope (§3.5, §3). A purely local provider is always permitted — nothing it can do leaves the machine.

pub fn evaluate(&self, id: &str, info: &ProviderInfo) -> ConsentDecision

The host’s pre-query consent gate: may we transmit a query to this provider right now, and if not, why (docs/context-reuse.md §3)?

• A provider declaring off-machine egress scopes is governed by the receipt gate: permitted only when every off-machine scope has a recorded receipt; otherwise NeedsReceipts names the scopes still missing one. (This is presence-based — a host enforcing expiry prunes/consults live receipts with its own clock.)
• A provider declaring only the boolean egress flag (no scopes) is governed by the legacy gate: permitted with a recorded ConsentRecord, else NeedsConsent.
• A purely local provider is Permitted.

pub fn permits(&self, id: &str, info: &ProviderInfo) -> bool

The boolean form of evaluate: may we send the payload to this provider right now?

Trait Implementations

impl Clone for ConsentStore

fn clone(&self) -> ConsentStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConsentStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ConsentStore

fn default() -> ConsentStore

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ConsentStore

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ConsentStore

fn eq(&self, other: &ConsentStore) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ConsentStore

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ConsentStore