Enum HardwarePolicy 

pub enum HardwarePolicy {
    Required,
    Preferred,
    Optional,
}

How strictly a caller requires hardware binding.

The policy decides what an Absent or Indeterminate probe means, and it is the place the fail-closed rule is enforced.

Variants

Required

Hardware is mandatory. Anything other than a self-tested working hardware component is an error; the keystore does not open.

Preferred

Default. Prefer hardware, and degrade only on a confident negative.

An Indeterminate probe is an error, not a degrade: silently downgrading “I could not tell” into “there is none” would let a transient probe failure quietly strip hardware protection from a wallet that has it, and the resulting software blob would then be openable anywhere. Failing closed keeps that decision with the caller.

Optional

Degrade on any negative outcome — including an indeterminate probe — but always report the distinguishing DegradeReason.

For callers that must open regardless (recovery tooling, read-only inspection). Honest, but permissive.

Implementations

impl HardwarePolicy

pub const fn allows_degrade(self) -> bool

Whether this policy tolerates degrading to software at all.

pub const fn allows_indeterminate_degrade(self) -> bool

Whether this policy tolerates degrading when the probe could not determine availability.

Trait Implementations

impl Clone for HardwarePolicy

fn clone(&self) -> HardwarePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HardwarePolicy

impl Debug for HardwarePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HardwarePolicy

fn default() -> HardwarePolicy

Returns the “default value” for a type.

impl Eq for HardwarePolicy

impl PartialEq for HardwarePolicy

fn eq(&self, other: &HardwarePolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for HardwarePolicy