Struct KeypairEntry 

pub struct KeypairEntry {
    pub coordinate: Coordinate,
    pub project: Option<String>,
    pub environment: String,
    pub sensitivity: Sensitivity,
    pub public_openssh: String,
    pub private_openssh: Zeroizing<String>,
}

A custodied keypair the agent can offer/sign with. Built by the face from a SecretRecord::Keypair { private: Some(_), .. }; the private half is held in a zeroizing buffer that is wiped when the entry drops. Public-only entries are never turned into a KeypairEntry (nothing to sign with).

Fields

coordinate: Coordinate

The canonical coordinate (<env>/<component>/<key>), for prompts/audit.

project: Option<String>

The owning project (None = global vault), for scope addressing.

environment: String

The environment segment, for the audit/confirm record.

sensitivity: Sensitivity

The secret’s sensitivity (drives per-signature confirmation).

public_openssh: String

OpenSSH public key (ssh-ed25519 … / ssh-rsa …).

private_openssh: Zeroizing<String>

OpenSSH private key, sealed in memory only — never written to disk (I7).