Struct KeyRecord 

pub struct KeyRecord {
    pub principal: String,
    pub verifying: VerifyingKey,
    pub kind: KeyKind,
    pub valid_from_micros: u64,
    pub valid_to_micros: Option<u64>,
    pub revoked: bool,
}

An enrolled key with its lifecycle. valid_from/valid_to bound when the key may sign (epoch micros, valid_to None is open-ended), and revoked hard disables it regardless of window. A rotation enrolls the new key while the old one’s valid_to still covers in-flight records (the overlap window).

Fields

principal: String

The authenticated principal this key is bound to.

verifying: VerifyingKey

The public key.

kind: KeyKind

Whether it is an operator or agent key.

valid_from_micros: u64

Not valid before this epoch-micros time.

valid_to_micros: Option<u64>

Not valid at or after this epoch-micros time (None is open-ended).

revoked: bool

Hard-disabled: never verifies, whatever the window.

Implementations

impl KeyRecord

pub fn key_id(&self) -> Vec<u8>

The 8-byte identifier derived from this record’s public key.

pub fn agent(principal: impl Into<String>, verifying: VerifyingKey) -> Self

An always-valid agent key.

pub fn operator(principal: impl Into<String>, verifying: VerifyingKey) -> Self

An always-valid operator key (may sign privileged control facts).

pub fn from_verifying_bytes( principal: impl Into<String>, verifying: &[u8], kind: KeyKind, ) -> Result<Self, LaserError>

Build a record from a 32-byte Ed25519 public verifying key.

pub fn valid_window(self, from_micros: u64, to_micros: Option<u64>) -> Self

Bound the validity window (epoch micros).

pub fn revoked(self) -> Self

Mark the key revoked.

Trait Implementations

impl Clone for KeyRecord

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.