Struct OwnerKeyBinding 

pub struct OwnerKeyBinding {
    pub format_version: u32,
    pub stable_owner_uuid: Vec<u8>,
    pub root_public_key: Option<AuthorizationVerificationKey>,
    pub root_state_hash: Vec<u8>,
    pub kind: i32,
    pub binding_epoch: u64,
    pub challenge_nonce: Vec<u8>,
    pub root_proof_of_possession: Option<AuthorizationSignature>,
    pub registry_attestation: Option<AuthorizationSignature>,
}

Registry-attested attachment of a root key to the stable owner UUID. stable_owner_uuid is exactly 16 bytes and never changes. challenge_nonce is exactly 32 bytes, single-use, and scoped by the service to the registry principal and UUID. binding_epoch begins at one and increases monotonically.

root_proof_of_possession signs: SHA-256(“heddle-owner-key-binding-v1” || canonical_owner_key_binding_v1_without_proofs)

registry_attestation signs the same body plus root_proof_of_possession. The registry attestation key comes from pinned release trust roots; PullReady and a sidecar can neither supply nor replace that key.

Fields

format_version: u32

Exactly 1.

stable_owner_uuid: Vec<u8>

root_public_key: Option<AuthorizationVerificationKey>

root_state_hash: Vec<u8>

kind: i32

binding_epoch: u64

challenge_nonce: Vec<u8>

root_proof_of_possession: Option<AuthorizationSignature>

registry_attestation: Option<AuthorizationSignature>

Implementations

impl OwnerKeyBinding

pub fn kind(&self) -> OwnerKeyBindingKind

Returns the enum value of kind, or the default if the field is set to an invalid enum value.

pub fn set_kind(&mut self, value: OwnerKeyBindingKind)

Sets kind to the provided enum value.

Trait Implementations

impl Clone for OwnerKeyBinding

fn clone(&self) -> OwnerKeyBinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OwnerKeyBinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OwnerKeyBinding

fn default() -> Self

Returns the “default value” for a type.

impl Eq for OwnerKeyBinding

impl Hash for OwnerKeyBinding

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for OwnerKeyBinding

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for OwnerKeyBinding

fn eq(&self, other: &OwnerKeyBinding) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for OwnerKeyBinding