pub struct RowSignature {
pub schema_version: u16,
pub key_id: String,
pub signed_at: DateTime<Utc>,
pub bytes: String,
}Expand description
Per-row Ed25519 signature persisted alongside the Event fields.
bytes is base64-encoded (URL-safe, no padding) so JSONL rows remain
printable / grep-friendly. Verification reconstructs the canonical
attestation preimage and checks bytes against the active operator
public key (see crate::audit::verify_signed_chain).
Fields§
§schema_version: u16Schema version of the attestation preimage encoder used to produce
bytes. Mirrors
cortex_core::canonical::SCHEMA_VERSION_ATTESTATION. Verifiers
MUST fail closed on unknown versions (ADR 0010 §1b).
key_id: StringPublic-key fingerprint of the signing operator identity.
signed_at: DateTime<Utc>Wall-clock timestamp at which the signature was produced. MUST
equal the signed_at field that went into the canonical preimage.
bytes: StringBase64 (URL-safe, no padding) of the 64-byte Ed25519 signature. We avoid hex purely to keep the JSONL row narrower; a future schema bump can choose a different encoding.
Trait Implementations§
Source§impl Clone for RowSignature
impl Clone for RowSignature
Source§fn clone(&self) -> RowSignature
fn clone(&self) -> RowSignature
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for RowSignature
impl Debug for RowSignature
Source§impl<'de> Deserialize<'de> for RowSignature
impl<'de> Deserialize<'de> for RowSignature
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl PartialEq for RowSignature
impl PartialEq for RowSignature
Source§fn eq(&self, other: &RowSignature) -> bool
fn eq(&self, other: &RowSignature) -> bool
self and other values to be equal, and is used by ==.