Struct TaskControlDescriptorV1 

pub struct TaskControlDescriptorV1 {

    pub schema_version: u32,
    pub sender: String,
    pub recipient: String,
    pub tenant_id: String,
    pub project_id: String,
    pub action: String,
    pub task_id: String,
    pub task_descriptor_digest: String,
    pub issued_at: DateTime<Utc>,
    pub expires_at: DateTime<Utc>,
    pub nonce: String,
    pub reason: Option<String>,
    pub grant_ref: CapabilityGrantRefV1,
    pub key_id: String,
    pub signature: String,
}

Signed control operation (tasks/get, tasks/cancel) against one existing task.

Deliberately a sibling of TaskDescriptorV1 rather than an extension of it: the send signing transcript is derived from the send fields, so adding a target-task field there would either change the deployed V1 send signature or leave the new field unsigned and forgeable. This type carries its own signing domain, so a send signature can never be replayed as a control signature nor the reverse.

Verifying this descriptor authorizes the operation, never the target. It proves the sender holds a live, unrevoked grant for this action in this scope; it does not prove the sender owns task_id. Before disclosing or mutating a task the receiver must additionally compare the persisted owner (super::Task::from_agent) against sender, the persisted scope against tenant_id/project_id, and the persisted descriptor digest against task_descriptor_digest, and must answer a mismatch indistinguishably from an unknown task id so that no cross-tenant existence oracle appears.

Fields

schema_version: u32

sender: String

recipient: String

tenant_id: String

project_id: String

action: String

task_id: String

task_descriptor_digest: String

issued_at: DateTime<Utc>

expires_at: DateTime<Utc>

nonce: String

reason: Option<String>

grant_ref: CapabilityGrantRefV1

key_id: String

signature: String

Implementations

impl TaskControlDescriptorV1

pub fn new( sender: &str, recipient: &str, tenant_id: &str, project_id: &str, action: &str, task_id: &str, task_descriptor_digest: &str, issued_at: DateTime<Utc>, expires_at: DateTime<Utc>, nonce: &str, reason: Option<&str>, grant_id: &str, key_id: &str, ) -> Self

pub fn sign(&mut self, signing_key: &SigningKey)

Bind every authority-relevant field, including the target task id and the digest of the task’s original descriptor, to an Ed25519 signature.

pub fn signing_bytes(&self) -> Vec<u8>

Deterministic signing transcript: the control domain tag followed by canonical JSON of the descriptor with an empty signature field.

The domain tag differs from TASK_DESCRIPTOR_SIGNING_DOMAIN, so the two transcripts are disjoint even if their canonical bodies were made to collide.

pub fn content_digest(&self) -> String

Digest of the signed content, excluding the signature itself. Used to dedupe a replayed control operation and to bind a response to the request it answers.

pub fn validate_shape(&self) -> Result<(), TaskAuthorityError>

pub fn verify_authority( &self, policy: &TaskAuthorityConfigV1, expected: &TaskAuthorityExpectationV1<'_>, ) -> Result<(), TaskAuthorityError>

Fail-closed authority check for a control operation, performed before any task lookup.

Identical in strictness to the send path — same peer resolution, same revocation, agent, scope, skew, TTL, grant-window and never-outlive-the- grant rules — with a tighter maximum lifetime and its own signing transcript. Because the grant is matched on action, a peer holding only a tasks/send grant is never authorized for tasks/get or tasks/cancel.

Returning Ok(()) does not establish ownership of task_id; see the type-level documentation for the owner, scope and digest comparison the receiver still owes before any disclosure or mutation.

Trait Implementations

impl Clone for TaskControlDescriptorV1

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TaskControlDescriptorV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TaskControlDescriptorV1

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TaskControlDescriptorV1

impl PartialEq for TaskControlDescriptorV1

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TaskControlDescriptorV1

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TaskControlDescriptorV1