Struct TrustRoot 

pub struct TrustRoot { /* private fields */ }

Trust root for plugin signature verification.

Configured per-Uni-instance from secure storage (KMS, config file).

Implementations

impl TrustRoot

pub fn new() -> Self

Construct an empty trust root (rejects every signed manifest).

pub fn allow(&mut self, key_id: impl Into<String>)

Add an allowed key id without binding public-key bytes.

Useful for tests / shape-only verification. Real builds (with the ed25519 feature) should use TrustRoot::allow_with_key.

pub fn allow_with_key( &mut self, key_id: impl Into<String>, public_key: [u8; 32], )

Add an allowed key with its 32-byte Ed25519 public key.

pub fn contains(&self, key_id: &str) -> bool

Check whether key_id is in the trust root.

pub fn public_key(&self, key_id: &str) -> Option<&[u8; 32]>

Return the 32-byte public key for key_id, if known.

Trait Implementations

impl Debug for TrustRoot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustRoot

fn default() -> TrustRoot

Returns the “default value” for a type.