Struct BuildOptions 

pub struct BuildOptions {
    pub sequence: u64,
    pub created_at: DateTime<Utc>,
    pub expires_at: Option<DateTime<Utc>>,
    pub supplier: String,
    pub producer: String,
    pub policy: TrustPolicy,
    pub approvals: Vec<(String, SignerFiles)>,
    pub release: SignerFiles,
    pub out: PathBuf,
}

What the bundle says about itself, and who signs it.

Fields

sequence: u64

Monotonic per (supplier, holger.intel/v1). The secure side refuses a bundle whose sequence is below the one it already holds.

created_at: DateTime<Utc>

expires_at: Option<DateTime<Utc>>

supplier: String

producer: String

policy: TrustPolicy

The trust policy the downstream verifies against; finalize checks the bundle under it before it is written.

approvals: Vec<(String, SignerFiles)>

Approvals, (role, signer), as many as the policy’s two-person rule asks.

release: SignerFiles

out: PathBuf