Struct SignedExecutionReceipt 

pub struct SignedExecutionReceipt {
    pub schema: String,
    pub schema_version: u32,
    pub payload: ExecutionReceiptPayload,
    pub signature: ReceiptSignature,
}

A signed receipt. The signer key is intentionally not embedded here.

Fields

schema: String

schema_version: u32

payload: ExecutionReceiptPayload

signature: ReceiptSignature

Implementations

impl SignedExecutionReceipt

pub fn from_file(path: impl AsRef<Path>) -> Result<Self, String>

Parse a bounded regular-file receipt and reject unknown or future data.

pub fn to_json(&self) -> Result<String, String>

Serialize as compact JSON.

pub fn to_pretty_json(&self) -> Result<String, String>

Serialize as indented JSON.

pub fn verify_signature(&self, key: &ReceiptPublicKey) -> Result<(), String>

Verify against one separately supplied public key.

pub fn verify_policy(&self, policy: &ReceiptTrustPolicy) -> Result<(), String>

Verify against a key selected through an explicit trust/revocation policy.

pub fn verify_plan(&self, plan: &ExecutionPlan) -> Result<(), String>

Require the signed payload to correspond exactly to a supplied plan.

pub fn verify_with_key( &self, key: &ReceiptPublicKey, plan: Option<&ExecutionPlan>, receipt_path: &Path, output_root: Option<&Path>, ) -> Result<ReceiptVerificationReport, String>

Authenticate with one public key, optionally bind a supplied plan, and verify every output below a portable root.

pub fn verify_with_key_at_stream_output( &self, key: &ReceiptPublicKey, plan: Option<&ExecutionPlan>, receipt_path: &Path, output_root: Option<&Path>, stream_output: Option<&Path>, ) -> Result<ReceiptVerificationReport, String>

Authenticate with one public key and optionally map the - locator in a v2 stream receipt to an exact file that captured stdout.

pub fn verify_with_policy( &self, policy: &ReceiptTrustPolicy, plan: Option<&ExecutionPlan>, receipt_path: &Path, output_root: Option<&Path>, ) -> Result<ReceiptVerificationReport, String>

Authenticate through a rotation/revocation policy, optionally bind a supplied plan, and verify every output below a portable root.

pub fn verify_with_policy_at_stream_output( &self, policy: &ReceiptTrustPolicy, plan: Option<&ExecutionPlan>, receipt_path: &Path, output_root: Option<&Path>, stream_output: Option<&Path>, ) -> Result<ReceiptVerificationReport, String>

Authenticate through a trust policy and optionally map the - locator in a v2 stream receipt to an exact file that captured stdout.

Trait Implementations

impl Clone for SignedExecutionReceipt

fn clone(&self) -> SignedExecutionReceipt

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignedExecutionReceipt

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SignedExecutionReceipt

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SignedExecutionReceipt

impl PartialEq for SignedExecutionReceipt

fn eq(&self, other: &SignedExecutionReceipt) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SignedExecutionReceipt

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SignedExecutionReceipt