Enum Verification 

#[non_exhaustive]
pub enum Verification {
    BestEffort,
    Off,
    Checksum,
    Signature,
    Strict,
}

How strictly UpdateEngine enforces integrity and authenticity checks on a release.

A “signature” is either a minisign signature (checked against EngineConfig::minisign_public_key) or a Sparkle-style Ed25519 signature (checked against EngineConfig::ed25519_public_key). Every signature the release publishes and a configured key can check is verified, and any mismatch fails the download. The same applies to deltas.

The default, BestEffort, verifies whatever the release provides and skips a check when its input is absent — so an unsigned release installs with only a checksum, or with nothing. The Signature/Strict modes instead fail closed: a release that cannot be verified is rejected at check time (before it is surfaced as available) and again at download time.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

BestEffort

Verify whatever the release and config provide; skip a check when its input is missing (no checksum, no signature, or no public key). The backwards-compatible default — note it fails open.

Off

Skip all integrity, authenticity, and payload checks. For tests and local development only.

Checksum

Require a matching SHA-256. Fails closed when the release publishes no checksum. A signature is still verified when one is available.

Signature

Require a valid signature: the release must publish a minisign or Ed25519 signature for which a public key is configured. A checksum is still verified when available, but is not itself required.

Strict

Require both a valid signature and a matching SHA-256.

Trait Implementations

impl Clone for Verification

fn clone(&self) -> Verification

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Verification

impl Debug for Verification

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Verification

fn default() -> Verification

Returns the “default value” for a type.

impl Eq for Verification

impl PartialEq for Verification

fn eq(&self, other: &Verification) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Verification