pub struct SignedVerdict {
pub format_version: u8,
pub body: CiVerdictBody,
pub content_hash: ContentHash,
pub change_id: ChangeId,
pub tree_digest: ContentHash,
pub signer_kind: SignerKind,
pub signed_at: String,
pub algorithm: String,
pub public_key: String,
pub signature: String,
}Expand description
A rich CI verdict body plus its provenance-bound signature.
Fields§
§format_version: u8Serialized envelope format. Only v2 is accepted.
body: CiVerdictBodyComplete conclusion-bearing content covered by Self::content_hash.
content_hash: ContentHashBLAKE3 hash of the body’s canonical JSON bytes.
change_id: ChangeIdRewrite-stable change identifier for the checked state.
tree_digest: ContentHashRoot tree digest for the exact tree that was checked.
signer_kind: SignerKindWhat kind of principal signed the verdict.
signed_at: StringRFC3339 timestamp, signed to prevent freshness-presentation rewrites.
algorithm: StringSignature algorithm understood by Heddle’s shared signing spine.
public_key: StringHex-encoded public key bytes.
signature: StringHex-encoded signature bytes.
Implementations§
Source§impl SignedVerdict
impl SignedVerdict
Sourcepub fn verify(&self) -> Result<(), SignedVerdictError>
pub fn verify(&self) -> Result<(), SignedVerdictError>
Verify the body digest and signature over every provenance binding.
Trust-set membership, freshness windows, and required-gate eligibility
remain caller policy. In particular, SignerKind::Device is advisory-only.
Sourcepub const fn is_advisory_only(&self) -> bool
pub const fn is_advisory_only(&self) -> bool
Whether policy must treat this verdict as advisory-only.
Trait Implementations§
Source§impl Clone for SignedVerdict
impl Clone for SignedVerdict
Source§fn clone(&self) -> SignedVerdict
fn clone(&self) -> SignedVerdict
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more