Struct PurgeOperationSigningBody 

pub struct PurgeOperationSigningBody {
    pub format_version: u32,
    pub spool_uuid: Vec<u8>,
    pub purge_identity: Option<PurgeSidecarIdentity>,
    pub payload_sha256: Vec<u8>,
    pub leaf_capability_id: Vec<u8>,
}

Canonical purge body reconstructed by a verifier from PurgeTransfer. Protobuf serialization is NEVER signed. canonical_purge_operation_v2 is:

u32_be(format_version) raw 16-byte spool_uuid blob_hash as a u32-length-prefixed string raw 32-byte payload_sha256 raw 32-byte leaf_capability_id

operation_signature is Ed25519 by the leaf capability subject key over:

SHA-256(“heddle-purge-operation-v2” || canonical_purge_operation_v2(body))

v2 limits are strict: encoded OwnerAuthorizationBundle <= 1,048,576 bytes; owner_state_chain <= 256; capability_chain 1..64; grants per capability 1..64; path segments per selector <= 64 and each segment 1..255 UTF-8 bytes; raw purge payload <= 67,108,864 bytes. The leaf grant requires exactly PURGE. Unknown actions/versions, non-canonical ids, trailing bytes, oversized inputs, and a mismatch with transfer identity or payload fail closed.

Fields

format_version: u32

Exactly 2.

spool_uuid: Vec<u8>

purge_identity: Option<PurgeSidecarIdentity>

payload_sha256: Vec<u8>

leaf_capability_id: Vec<u8>

Trait Implementations

impl Clone for PurgeOperationSigningBody

fn clone(&self) -> PurgeOperationSigningBody

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PurgeOperationSigningBody

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PurgeOperationSigningBody

fn default() -> Self

Returns the “default value” for a type.

impl Eq for PurgeOperationSigningBody

impl Hash for PurgeOperationSigningBody

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for PurgeOperationSigningBody

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for PurgeOperationSigningBody

fn eq(&self, other: &PurgeOperationSigningBody) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PurgeOperationSigningBody