Struct EncodedJitConfig 

pub struct EncodedJitConfig(/* private fields */);

The encoded just-in-time configuration: a short-lived credential.

07-security.md, credential inventory: “Restrictive temporary handoff only. Delete immediately after launch; never persist.” This type is what makes the first half enforceable at the type level rather than by everyone remembering:

• Debug and Display redact. Both are hand-written. A #[derive(Debug)] added later to a struct with a plain String field is precisely how this control is lost, which is why lib.rs’s crate documentation states the rule and why tests/no_jit_config_reaches_the_logs.rs plants that exact mistake as a positive control.
• It does not serialise. There is no serde::Serialize impl, so it cannot be written into a config file, a SQLite row, a status --json payload or a structured log field by any code that compiles. The doctest below is the executable form of that claim.
• It zeroises on drop. Drop calls Self::scrub, which zeroes the buffer through zeroize. secrecy’s SecretString also zeroises on its own drop; the explicit scrub is what makes the property testable rather than a statement about a dependency.
• It is not Clone. A clone of a secret is a second copy with its own lifetime, and this value’s whole security property is a short one.

The error code is pinned, and that is the whole value of the doctest. A bare compile_fail passes when the snippet fails to compile for any reason — a typo, a renamed type, a missing import — so it would keep passing after someone added a Serialize derive and broke something else in the same edit. E0277 is “the trait bound is not satisfied”, which is the one reason this claim is about.

fn is_serialisable<T: serde::Serialize>(_: &T) {}
let config = EncodedJitConfig::new("not-a-real-jit-configuration");
// The JIT configuration must never reach a config file, a database row, a
// `--json` payload or a structured log field. This must not compile.
is_serialisable(&config);

Implementations

impl EncodedJitConfig

pub fn new(raw: impl Into<String>) -> Self

pub fn expose(&self) -> &str

The configuration itself, for the one caller that hands it to a runner process.

Named expose rather than as_str so that every use site says out loud what it is doing, and so that grep expose_jit finds all of them.

pub fn len(&self) -> usize

Length in bytes, which is safe to log and useful for diagnosing a truncated handoff. v1 observed 4,088 characters at organization scope.

pub fn is_empty(&self) -> bool

Trait Implementations

impl Debug for EncodedJitConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EncodedJitConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for EncodedJitConfig

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.