pub struct AuditEntry {
pub frame: FrameId,
pub disposition: FrameDisposition,
pub attestation: AttestationState,
}Expand description
One line of the composition audit: which frame, what became of it, and whether its provenance was signed by a key the host trusts.
Fields§
§frame: FrameIdThe frame’s stable identity.
disposition: FrameDispositionIncluded (and how verifiable) or excluded (and why).
attestation: AttestationStateWhat the host found when it checked this frame’s provenance attestation
against its TrustStore (SPEC.md §6.5,
ADR 0016).
A separate axis from FrameDisposition::Included’s
VerificationState, because the two answer different questions:
can this be revalidated later (a content_digest the provider can be
re-asked about) versus was this signed by someone I trust (a signature
checkable offline, by anyone holding the key). A frame can carry a
digest and a forged signature at once, and an audit that collapsed them
could not say so.
Recorded on every entry, excluded ones included: a frame dropped as a cross-provider duplicate has an attestation state too, and it is worth seeing — dedup keeps the higher-scored copy, which may be the unsigned one.
Never a reason for exclusion. SPEC.md F9 makes an unverifiable
attestation a degradation to unattested, and this field is where that
degradation is recorded rather than acted on.
Trait Implementations§
Source§impl Clone for AuditEntry
impl Clone for AuditEntry
Source§fn clone(&self) -> AuditEntry
fn clone(&self) -> AuditEntry
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more