Struct ExpectedContext 

pub struct ExpectedContext {
    pub operator_epoch: String,
    pub principal_uid: u32,
    pub observation: Observation,
}

Operator assertion from protected configuration, never an engine observation.

Fields

operator_epoch: String

principal_uid: u32

observation: Observation

Implementations

impl ExpectedContext

pub fn validate(&self) -> Result<(), &'static str>

pub fn validate_local_socket_policy(&self) -> Result<(), &'static str>

Supported local deployment policy, not an authentication claim. Rootful sockets must belong to root; rootless sockets to the non-root configured principal. Other deployments require an explicit future profile.

pub fn match_current_operation( &self, bound: &Self, before: &Observation, after: &Observation, ) -> Result<(), &'static str>

Integration entry on Unix: compare the configured principal to actual process euid, not another caller-supplied identity. Config protection is still the host’s responsibility; this does not open any file.

pub fn match_operation( &self, bound: &Self, before: &Observation, after: &Observation, ) -> Result<(), &'static str>

Compare the exact protected caller context and both observations. Equal observations can occur across socket activation or service restart. Success therefore says nothing about daemon lifetime or authentication.

Trait Implementations

impl Clone for ExpectedContext

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExpectedContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ExpectedContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ExpectedContext

impl PartialEq for ExpectedContext

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ExpectedContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ExpectedContext