Struct TimelineOriginEndorsement 

pub struct TimelineOriginEndorsement {
    pub deployment_public_key: Vec<u8>,
    pub spool_id: String,
    pub thread_id: Vec<u8>,
    pub run_id: String,
    pub principal_id: String,
    pub credential_class: i32,
    pub effective_pop_key_sha256: Vec<u8>,
    pub credential_identity: Option<TimelineOriginCredentialIdentity>,
    pub uploader_device_public_key: Vec<u8>,
    pub signature: Vec<u8>,
}

The active origin credential signs this exact transcript with Ed25519: UTF8(“heddle-timeline-run-origin-v3”) || 0x00, then, in field order below, each byte/string field as u32be(byte_length) || its exact bytes; class is one unsigned byte (1 or 2). Credential identity is one tag byte followed by counted IDs: 0x01 || counted(credential_id) for server_issued, or 0x02 || counted(issued_ancestor_credential_id) || counted(terminal_revocation_id) || counted(derivation_path_sha256) for offline_derived. UUIDs are 36 lowercase ASCII bytes in canonical hyphenated form. The signature itself is excluded. No protobuf serialization, client timestamp or hash of a reconstructed RunRecord is a signing input. For offline_derived, Weft verifies the COMPLETE chain from the exact named Weft-issued ancestor authority block through the terminal block, with at least one attenuation block. Every Biscuit block, including the authority, MUST use signature-v1. Each attenuation signature covers the preceding block signature. Reject any chain containing a signature-v0 block. Verify the complete chain, attenuation and lineage against the issued ancestor, then derive revocation IDs from every block in order, including the authority and terminal blocks. Each is the 64 raw signature bytes from Biscuit::revocation_identifiers(). Compute derivation_path_sha256 as SHA-256(UTF8(“heddle-timeline-derivation-path-v1”) || 0x00 || u32be(N) || ID[0] || … || ID[N-1]), where N >= 2 and IDs are exactly 64 bytes. Each signature-v1 attenuation block binds to its predecessor, and the complete ordered signature list commits to the entire path. Require the computed path digest and terminal ID to equal the signed identity; match SHA-256(final effective PoP public key) to the signed key digest, then verify the endorsement with that effective public key. The ancestor ID alone never authenticates the agent. Reject a wrong root, path, terminal ID or key. An exact pre-expiry registration may supply the stored VERIFIED chain binding and original effective public key when the chain is absent from an upload. Otherwise the complete chain is required, including with fresh acceptance or a receipt retry. Fresh acceptance may override original expiry or revocation only for ADMISSION; it never skips lineage, path/key recomputation, signature verification, or original public-key resolution. A live-chain admission requires the chain to be live, unexpired and unrevoked. Registration stores the full revocation set; later revocation invalidates its admission basis.

Fields

deployment_public_key: Vec<u8>

Weft deployment public identity, exactly 32 bytes; not a replica key.

spool_id: String

Canonical Spool UUID; must match thread.spool and run.spool.

thread_id: Vec<u8>

Exact ThreadId.value, 32 bytes.

run_id: String

ASCII [A-Za-z0-9_-]{1,128}.

principal_id: String

Server-verified run-principal canonical account UUID.

credential_class: i32

effective_pop_key_sha256: Vec<u8>

SHA-256 of the final effective PoP public key, exactly 32 bytes.

credential_identity: Option<TimelineOriginCredentialIdentity>

uploader_device_public_key: Vec<u8>

Exact enrolled or paired uploader device proof key, 32 bytes.

signature: Vec<u8>

Ed25519 signature by the verified origin credential, exactly 64 bytes.

Implementations

impl TimelineOriginEndorsement

pub fn credential_class(&self) -> TimelineOriginCredentialClass

Returns the enum value of credential_class, or the default if the field is set to an invalid enum value.

pub fn set_credential_class(&mut self, value: TimelineOriginCredentialClass)

Sets credential_class to the provided enum value.

Trait Implementations

impl Clone for TimelineOriginEndorsement

fn clone(&self) -> TimelineOriginEndorsement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TimelineOriginEndorsement

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TimelineOriginEndorsement

fn default() -> TimelineOriginEndorsement

Returns the “default value” for a type.

impl Eq for TimelineOriginEndorsement

impl Hash for TimelineOriginEndorsement

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for TimelineOriginEndorsement

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for TimelineOriginEndorsement

fn eq(&self, other: &TimelineOriginEndorsement) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TimelineOriginEndorsement