Enum Attestation 

#[non_exhaustive]
pub enum Attestation {
    None,
    Verified {
        mechanism: &'static str,
        subject: String,
    },
}

Whether — and how — the transport verified the peer’s code identity.

This is deliberately separate from pid/uid: knowing which process connected is not the same as knowing it runs the binary you expect.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

None

The transport did not verify code identity. Treat the peer as untrusted.

Verified

The OS or the transport verified code identity before the connection was handed over.

Fields

mechanism: &'static str

How it was verified, e.g. "xpc-codesign-requirement", "pidfd-exe-sha256", "pipe-sid-dacl".

subject: String

What matched: the requirement string, digest, or SID.

Implementations

impl Attestation

pub fn is_verified(&self) -> bool

True only for Attestation::Verified.

Trait Implementations

impl Clone for Attestation

fn clone(&self) -> Attestation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Attestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.