pub struct LlmSummaryOperatorAttestationEnvelope {
pub schema_version: u16,
pub purpose: String,
pub operator_verifying_key_hex: String,
pub operator_key_id: String,
pub signed_at: String,
pub decay_job_id: String,
pub model_name: String,
pub prompt_template_blake3: String,
pub signature_hex: String,
}Expand description
On-disk envelope for an operator attestation authorising an LLM summary job. Structurally analogous to the migration-attestation envelope: the Ed25519 signature is computed over a domain-tagged length-prefixed binary encoding of the non-signature fields.
Fields§
§schema_version: u16Envelope schema version. Must equal
super::DECAY_LLM_SUMMARY_ATTESTATION_SCHEMA_VERSION.
purpose: StringPurpose discriminator. Must equal
super::DECAY_LLM_SUMMARY_ATTESTATION_PURPOSE.
operator_verifying_key_hex: StringHex-encoded Ed25519 verifying key (32 bytes, lowercase, no separator).
operator_key_id: StringFree-form operator key id (matches cortex-identity).
signed_at: StringRFC3339 timestamp the envelope was signed at.
decay_job_id: StringDecay job id this attestation authorises. Binds the envelope to a single job so a captured attestation cannot be replayed against a different job.
model_name: StringPinned LLM model name (e.g. claude-sonnet-4-7@1). The future
backend MUST refuse if the resolved model name differs.
prompt_template_blake3: StringBlake3 digest of the prompt template that will be sent to the LLM.
Stored as blake3:<hex> for forward compatibility with other hash
families.
signature_hex: StringHex-encoded Ed25519 signature (64 bytes, lowercase).
Trait Implementations§
Source§impl Clone for LlmSummaryOperatorAttestationEnvelope
impl Clone for LlmSummaryOperatorAttestationEnvelope
Source§fn clone(&self) -> LlmSummaryOperatorAttestationEnvelope
fn clone(&self) -> LlmSummaryOperatorAttestationEnvelope
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more