Struct KeyVault 

pub struct KeyVault { /* private fields */ }

In-memory key vault.

The vault is the entry point for everything key-vault does. Application code constructs one via KeyVaultBuilder, registers keys against it, and receives KeyHandles in return. The vault itself is cheap to clone (it is Arc-backed internally) and safe to share across threads.

Key registration, access, rotation, and recovery are introduced in later phases. This skeleton exposes only the public shape — construction, cloning, and the lock-out indicator — so that downstream crates can wire against it now.

Implementations

impl KeyVault

pub fn is_locked_out(&self) -> bool

Returns true if the vault is in lock-out state.

Lock-out is the SecurityMonitor’s response to repeated failures: once the threshold is crossed, access to every key in the vault is denied until the configured recovery condition is met. In Phase 0.2 the lock-out flag exists but is never set; Phase 0.8 connects it to monitor events.

pub fn config(&self) -> &VaultConfig

Snapshot of the vault’s configuration.

Trait Implementations

impl Clone for KeyVault

fn clone(&self) -> KeyVault

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyVault

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.