Struct Attestation 

pub struct Attestation {
    pub binary_sha256: String,
    pub config_sha256: String,
    pub attested_at: String,
    pub drift: Option<DriftMark>,
}

Fields

binary_sha256: String

SHA-256 of the running binary at registration/heartbeat time.

config_sha256: String

SHA-256 of the active role file (empty when the role is built-in).

attested_at: String

drift: Option<DriftMark>

Set when this attestation replaced a different one, i.e. drift was observed and audited at attested_at. Sticky: heartbeat persists the freshly observed state, so every later heartbeat is clean by construction and auto-clearing would make block_on_drift expire after a single beat. Cleared ONLY by lean-ctx agent ack-drift <agent-id> --evidence <evidence>, which binds the acknowledgement to the exact evidence the operator reviewed. Resuming a suspended identity deliberately does not clear it: un-suspending an identity after an unrelated incident must never silently sign off attestation drift nobody looked at.

default on purpose: a pre-Phase-18 registry has no drift key and must keep round-tripping as “no unacknowledged drift”.

Trait Implementations

impl Clone for Attestation

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Attestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Attestation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Attestation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.