Struct RateAboveCeiling 

pub struct RateAboveCeiling { /* private fields */ }

Typed sentinel for a server that signed an open-stage StreamResponse (ok == true) quoting a per-MB rate_per_mb above the buyer’s effective ceiling (#1375). The buyer aborts before paying, so the profitable “quote low on the probe, quote high on the stream, then deliver” bait-and-switch never gets paid.

The ceiling is the lower of two bounds the caller supplies: the probe rate the candidate was selected on (a stream quote may not exceed what the probe advertised) and an optional absolute buyer config (max_rate_per_mb). Because the probe-relative bound is always applied by the node pull path, a completed delivery is by construction priced at or below the probe rate — so it can never be rate-manipulation (SlashJudge requires stream.ratePerMb > probe.ratePerMb), and the challengeable case is exactly this abort.

Carries the operator’s own signed response — already verified against expected_signer by verify_response before construction, so it still recovers to the delivering node and a caller could replay it (paired with the same node’s ProbeResponse) to SlashJudge with no re-signing.

Slashability caveat. The evidence is only rate-manipulation evidence when the probe-relative bound was the one exceeded: SlashJudge requires stream.ratePerMb > probe.ratePerMb. The ceiling here is min(probe_rate, config_absolute) (effective_rate_ceiling), so when the buyer’s absolute config bound is the binding one the quote may sit at or below the probe rate and be perfectly honest. A challenger must therefore still confirm quote > probeRate before submitting; this type does not assert it.

Consumption. The signed response is retained on the error so a caller can act on it, but the node’s pull-failure handler does not itself submit a challenge — auto-slashing is deferred (the same footing as the daemon never auto-challenging an UpstreamRefused, whose evidence is exercised only by the e2e harness today). evidence() is the only accessor; the field is private and the sole constructor derives it from the verified response, so the verified-signature invariant cannot be bypassed by a hand-built value.

Implementations

impl RateAboveCeiling

pub const fn quoted_rate_per_mb(&self) -> u64

The per-MB rate the server quoted in the signed StreamResponse.

pub const fn ceiling_rate_per_mb(&self) -> u64

The effective ceiling the quote exceeded (min of probe rate and config).

pub const fn evidence(&self) -> &StreamResponse

The operator’s own signed StreamResponse, verified against expected_signer before this value was built. See the type docs for the slashability caveat (only quote > probeRate is manipulation).

Trait Implementations

impl Debug for RateAboveCeiling

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for RateAboveCeiling

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for RateAboveCeiling

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.