Struct IntegrityPolicyGate 

pub struct IntegrityPolicyGate { /* private fields */ }

Enforces signature, sequence, and route identity integrity before persistence.

This is the P0 policy gate: every record must pass all checks here before it is allowed through to storage.

Implementations

impl IntegrityPolicyGate

pub fn new() -> Self

pub fn register_device( &mut self, device_id: impl Into<String>, key: VerifyingKey, )

pub fn enforce( &mut self, record: &AuditRecord, cert_identity: Option<&str>, ) -> Result<(), IngestError>

Run all integrity checks for record.

Checks (in order):

1. Route identity — cert_identity must match record.device_id when present.
2. Signature — payload hash must be signed by the registered device key.
3. Sequence — must be strictly monotonic and non-duplicate.
4. Previous-record hash — must match the last accepted record’s hash.

Trait Implementations

impl Default for IntegrityPolicyGate

fn default() -> IntegrityPolicyGate

Returns the “default value” for a type.