Struct HostReceiptAuthority 

pub struct HostReceiptAuthority { /* private fields */ }

Private host signing authority loaded from an operator-owned configuration.

The signing key, admission snapshot, and ledger store never leave this authority. In particular, this type intentionally does not implement Debug.

Implementations

impl HostReceiptAuthority

pub fn published_receipt_json( &self, publication: &PublishedCanonicalReceipt, ) -> Result<String>

Read the just-published receipt through the existing verified lineage owner. This is not a historical lookup or a caller-supplied artifact-path API.

pub fn export_checkpoint( &self, request: &HostCheckpointRequest, ) -> Result<Value>

impl HostReceiptAuthority

pub fn resume_checkpoint( &self, request: &HostCheckpointResumeRequest, ) -> Result<Value>

impl HostReceiptAuthority

pub fn continue_checkpoint( &self, request: &HostCheckpointImportRequest, ) -> Result<Value>

impl HostReceiptAuthority

pub fn package_checkpoint( &self, request: &HostCheckpointPackageRequest, ) -> Result<Value>

Package one exported local checkpoint with the complete evidence its verifier requires, proven through this host’s current lineage.

pub fn import_checkpoint( &self, request: &HostCheckpointImportRequest, ) -> Result<Value>

Admit one transferred checkpoint against an independently pinned source and an operator-selected receiving scope.

impl HostReceiptAuthority

pub fn published_context_protocol( &self, attempt: &HostReceiptAttempt, invocation: &EngineInvocationV1, observation: &EngineObservationV1, published: &PublishedCanonicalReceipt, ) -> Result<Option<RecordedExecutionProtocolV1>, String>

Initial publication has no quality signal; never derive acceptance from success.

impl HostReceiptAuthority

pub fn observe_outcome(&self, request: &HostOutcomeRequest) -> Result<Value>

impl HostReceiptAuthority

pub fn observe_engine_outcome( &self, request: &EngineOutcomeRequestV1, ) -> Result<EngineOutcomeResponseV1>

impl HostReceiptAuthority

pub fn recheck_checkpoint_sources( &self, request: &HostCheckpointImportRequest, ) -> Result<Value>

impl HostReceiptAuthority

pub fn admit_task_identity( &self, project_root: Option<&str>, ) -> Result<Option<AdmittedTaskIdentity>, &'static str>

Recheck signer and exact workspace on every call, including cached replay. Saved sessions and MCP arguments cannot grant or change this identity.

impl HostReceiptAuthority

pub fn from_reader(input: &mut dyn Read) -> Result<Self, &'static str>

Load the strict, bounded host settings document from an existing reader.

pub fn from_reader_scoped( input: &mut dyn Read, ledger_root: Option<&Path>, ) -> Result<Self, &'static str>

Constrain an operator-selected ledger to the caller’s trusted state root. Uses the existing descriptor-pinned ledger store; no second store authority.

pub fn validate_current(&self) -> Result<(), &'static str>

Revalidate the trusted signer against the host’s current UTC clock.

pub fn require_context_decision_signing(&self) -> Result<(), &'static str>

Require the independent operator grant before starting a source-bound attempt.

pub fn begin( &self, task: &TaskEnvelopeV1, plan: &ExecutionPlanV1, ) -> Result<HostReceiptAttempt, &'static str>

Admit one task, persist intent, and retain its exclusive task lock.

pub fn begin_with_context( &self, task: &TaskEnvelopeV1, plan: &ExecutionPlanV1, context: Option<&TaskAutopilotDecision>, ) -> Result<HostReceiptAttempt, &'static str>

Capture the actual immutable planning handoff before Engine execution.

pub fn publish( &self, attempt: &HostReceiptAttempt, invocation: &EngineInvocationV1, observation: &EngineObservationV1, delivered: &str, ) -> Result<PublishedCanonicalReceipt, &'static str>

Verify and publish the exact delivered view as one canonical receipt.