Struct DualCommitStore 

pub struct DualCommitStore { /* private fields */ }

DualCommitStore

Redundant commit store for encoded ledger generations.

This is an advanced low-level API for framework or stable-IO owners. Most applications should recover, validate, and commit through the allocation ledger flow rather than manipulating encoded physical commit slots directly.

Writers stage a complete generation record into the inactive slot. Readers recover by selecting the highest-generation slot after every present slot passes marker and checksum validation. Any present invalid slot fails closed; recovery never rolls durable allocation history back to an older generation.

In the default runtime both slots are serialized together inside one ic-stable-structures::Cell; they are not independently atomic physical writes. ICP message execution supplies atomic stable-memory commit and rollback. The checksum is for accidental-corruption detection only. It is not a cryptographic hash and does not provide adversarial tamper resistance.

Implementations

impl DualCommitStore

pub const fn is_uninitialized(&self) -> bool

Return true when no commit slot has ever been written.

pub const fn slot0(&self) -> Option<&CommittedGenerationBytes>

Borrow the first commit slot.

Slot records are untrusted recovered state until recovery selects an authoritative generation.

pub const fn slot1(&self) -> Option<&CommittedGenerationBytes>

Borrow the second commit slot.

Slot records are untrusted recovered state until recovery selects an authoritative generation.

pub fn authoritative( &self, ) -> Result<&CommittedGenerationBytes, CommitRecoveryError>

Return the authoritative committed record after validating present slots.

pub fn diagnostic(&self) -> CommitStoreDiagnostic

Build a read-only recovery diagnostic for the protected commit slots.

pub fn commit_payload( &mut self, payload: Vec<u8>, ) -> Result<&CommittedGenerationBytes, CommitRecoveryError>

Commit a new payload to the inactive slot.

The returned record is the new authoritative in-memory slot. The owner remains responsible for persisting the enclosing store.

pub fn commit_payload_at_generation( &mut self, generation: u64, payload: Vec<u8>, ) -> Result<&CommittedGenerationBytes, CommitRecoveryError>

Commit payload as an explicitly numbered physical generation.

This is the low-level physical-slot primitive used by crate::LedgerCommitStore. Normal ledger commits should use crate::LedgerCommitStore::commit or crate::AllocationBootstrap so payloads are decoded, current-format checked, and integrity-validated before they can become authoritative.

The commit-slot generation is checked against the recovered predecessor. This method does not inspect payload.

Trait Implementations

impl Clone for DualCommitStore

fn clone(&self) -> DualCommitStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DualCommitStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DualCommitStore

fn default() -> DualCommitStore

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DualCommitStore

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for DualCommitStore

impl PartialEq for DualCommitStore

fn eq(&self, other: &DualCommitStore) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for DualCommitStore

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DualCommitStore