Struct VerifyOptions 

pub struct VerifyOptions {
    pub trust_pem: Option<String>,
    pub tsa_trust_pem: Option<String>,
    pub allowed_list_pem: Option<String>,
    pub cawg_trust_pem: Option<String>,
    pub cawg_allowed_certs_pem: Option<String>,
    pub no_default_trust: bool,
    pub cawg_did_documents: Option<HashMap<String, Value>>,
    pub cawg_strict_encoding: bool,
    pub strict_conformance: bool,
    pub validation_time: Option<String>,
    pub telemetry: TelemetryOptions,
}

Fields

trust_pem: Option<String>

PEM bundle of claim-signing trust anchors.

tsa_trust_pem: Option<String>

PEM bundle of timestamp-authority trust anchors.

allowed_list_pem: Option<String>

PEM bundle of directly allowed end-entity certificates.

cawg_trust_pem: Option<String>

PEM bundle of trust anchors for CAWG named-actor (identity) X.509 credentials. None leaves identity signers untrusted (their well-formedness is still validated).

cawg_allowed_certs_pem: Option<String>

PEM bundle of directly allowed CAWG end-entity certificates.

no_default_trust: bool

Disable the bundled C2PA, IPTC, and Encypher trust snapshots. By default, caller-supplied PEM bundles extend those snapshots; setting this to true evaluates only caller-supplied trust material.

cawg_did_documents: Option<HashMap<String, Value>>

Pinned offline did:web DID-document store for CAWG ICA issuers, keyed by primary DID (no fragment). Resolution never touches the network: an issuer absent from the store fails closed with cawg.ica.did_unavailable.

cawg_strict_encoding: bool

Refuse CAWG 1.1-era legacy encodings (field-order signer_payload, 1.1 ICA context, byte-array c2paAsset hashes): only the CAWG 1.2 canonical shapes are attempted. When unset, legacy shapes verify and are surfaced via the informational com.encypher.cawg.legacyProfile status.

strict_conformance: bool

Apply the C2PA 2.4 Conformance Program posture instead of the default generous core-spec read. This raises applicable SHOULD requirements to the conformance bar and emits strict diagnostics in the reader report.

validation_time: Option<String>

RFC 3339 validation instant. Current UTC time is used when omitted.

telemetry: TelemetryOptions

Failure telemetry override. None uses the saved per-user preference.

Trait Implementations

impl Clone for VerifyOptions

fn clone(&self) -> VerifyOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerifyOptions

fn default() -> VerifyOptions

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for VerifyOptions

where VerifyOptions: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.