Struct LoginRevocationChange 

pub struct LoginRevocationChange { /* private fields */ }

Proposed ledger record from a serialized commit callback or trusted storage. A durable host must persist this with its session/replay changes before returning success. This is not a credential or reusable authorization result.

Implementations

impl LoginRevocationChange

pub fn check_replacement( &self, previous: &Self, now_ns: u64, ) -> Result<(), LoginRevocationError>

Check replacement of a trusted retained record for this same storage key. Live records keep their login binding/pool, denial and retention deadline. After expiry a new login/pool may replace them; domain and caller must still match. This does not authenticate storage, admit a proposed record, observe the clock, charge a budget or commit anything. Hosts retain those checks and exact pool accounting under their atomic transaction boundary.

pub fn audience(&self) -> AudienceId

Protected trust domain owning the record.

pub fn caller(&self) -> Principal

Authenticated runtime caller whose record changes.

pub fn until_ns(&self) -> u64

Exclusive retention deadline, including the configured clock margin.

pub fn state(&self) -> LoginRecordState

Typed state from this checked ledger record. Storage codecs retain their existing frozen representation independently of this Rust projection.