dsfb-densor-runtime 0.1.0

A thin, deterministic execution-substrate skeleton for DSFB densor pipelines: load manifest -> validate authority hashes -> execute stages -> seal evidence -> emit receipts. Carries no domain or cross-domain claims.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

//! Authority hashes — the frozen digests a stage was built against.
//!
//! An `AuthorityHash` names a piece of frozen authority (e.g. a detector atlas, an envelope policy, a dataset
//! corpus) by `(name, 32-byte digest)`. A stage must declare the authorities it consulted; the runtime checks
//! those against the manifest's frozen set before admitting the stage's output. This is the substrate analogue of
//! the chemical crate's `atlas_hash_v1` / `corpus_hash_v1` pinning: an execution is only meaningful relative to a
//! named, frozen authority.

use crate::seal::to_hex;
use serde::{Deserialize, Serialize};

/// A named, frozen authority digest a stage was built/validated against.
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
pub struct AuthorityHash {
    pub name: String,
    /// 32-byte SHA-256 of the frozen authority's canonical bytes.
    pub hash: [u8; 32],
}

impl AuthorityHash {
    pub fn new(name: impl Into<String>, hash: [u8; 32]) -> Self {
        AuthorityHash {
            name: name.into(),
            hash,
        }
    }

    /// Lowercase hex of the digest, for display / receipts.
    pub fn hex(&self) -> String {
        to_hex(&self.hash)
    }
}