pub struct LocalEvidence {
pub report: VerificationReport,
pub manifest_store: Option<Vec<u8>>,
pub manifest_store_sha256: Option<String>,
pub asset_sha256: String,
pub hard_binding: LocalHardBinding,
pub active_manifest_label: Option<String>,
pub store_manifests: Vec<ManifestDigest>,
}Expand description
One local verification plus what a service needs to re-verify the same manifest store without receiving the asset.
Every field comes from a single verification pass. manifest_store is the
exact embedded store that pass read, so a remote verifier checks the bytes
the local verdict was computed over, not a second extraction.
Fields§
§report: VerificationReportExactly what verify_with_options returns for the same inputs.
manifest_store: Option<Vec<u8>>The embedded manifest-store bytes that were verified. None when the
asset carries no embedded store, or when the verdict came from a store
fetched from a remote reference the asset declares.
manifest_store_sha256: Option<String>Lowercase hex SHA-256 of manifest_store.
asset_sha256: StringLowercase hex SHA-256 of the whole asset.
hard_binding: LocalHardBindingThe active manifest’s hard binding and this pass’s verdict on it.
active_manifest_label: Option<String>Label of the store’s active manifest, when manifest_store parses.
store_manifests: Vec<ManifestDigest>Every manifest of manifest_store with the expanded-domain SHA-256 an
ingredient reference to it uses, in store order. Empty without a
readable store.