Enum OperatorCredentialReissueRefusal 

pub enum OperatorCredentialReissueRefusal {
    ConversationUnknown {
        conversation_id: ConversationId,
    },
    ParticipantUnknown {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
    },
    Retired {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
        retired_generation: u64,
    },
    LiveBinding {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
        current_generation: u64,
        binding_state: &'static str,
    },
    DetachReplayOpen {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
        current_generation: u64,
    },
    LiveReceipt {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
        current_generation: u64,
        receipt: &'static str,
    },
    GenerationMismatch {
        conversation_id: ConversationId,
        participant_id: ParticipantId,
        presented_generation: u64,
        current_generation: u64,
    },
}

Every typed refusal OperatorCredentialReissue can answer (§0.18 item 2).

Each variant commits no receipt, order, cursor, binding, lifecycle record, or retention mutation, and each is a NAMED refusal rather than whatever the code happens to do.

Variants

ConversationUnknown

Pre-guard lookup miss: no durable conversation resolves this id.

Fields

conversation_id: ConversationId

The presented conversation id, and nothing beyond it.

ParticipantUnknown

Pre-guard lookup miss: the conversation exists, the identity does not.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The presented participant id, and nothing beyond it.

Retired

Guard (a): a tombstoned identity. Re-issue never remints a retired one.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The retired identity.

retired_generation: u64

Generation the identity held when it was retired.

LiveBinding

Guard (b): a live binding. A bound member is demonstrably operating under working authority, and re-issue against it would be seat revocation — v1 has no operator Leave and A7 does not create one.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The bound identity.

current_generation: u64

Current credential generation.

binding_state: &'static str

Which live binding state refused: bound or pending_finalization.

DetachReplayOpen

⚠ NOT one of §0.18’s four guards — a defect this build MEASURED, named rather than absorbed, and returned to the seat as a contract flag.

The identity’s last committed detach still holds its exact-replay cell open. commit_attach requires that cell’s request generation to equal the member’s current generation (lifecycle::attach.rs, transition_detach_cell’s DetachCell::Committed arm), and a re-issue moves the generation while the cell stays where it is. So a re-issue against this shape would mint a lawful-looking credential that the ORDINARY attach path of §0.18 item 5 then refuses with a bare AttachCommitError::DetachCellAuthority invariant — an unattachable credential, which is the silent trap this estate refuses to ship.

Refusing is the only answer available inside this lane’s authority: terminalizing the cell here would change what an exact detach-token replay is answered with, which is existing refusal/restoration semantics and not this lane’s to move.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The identity holding the open replay cell.

current_generation: u64

Current credential generation.

LiveReceipt

Guard (c): a live attach or enrollment receipt. A live receipt means the R-C0 recovery window is still open and the ordinary recovery path must be exhausted first.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The identity holding the live receipt.

current_generation: u64

Current credential generation.

receipt: &'static str

Which receipt is still live: attach or enrollment.

GenerationMismatch

Guard (d): the compare-and-set failed.

⛔ This payload is NORMATIVE (§0.18 item 4). The presented/current pair is the ONLY way an operator who lost a re-issue response learns the post-rotation generation, so a future edit that minimizes it silently breaks lost-response recovery.

Fields

conversation_id: ConversationId

The presented conversation id.

participant_id: ParticipantId

The identity.

presented_generation: u64

Generation the operator presented.

current_generation: u64

Generation the identity actually holds.

Trait Implementations

impl Clone for OperatorCredentialReissueRefusal

fn clone(&self) -> OperatorCredentialReissueRefusal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OperatorCredentialReissueRefusal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for OperatorCredentialReissueRefusal

impl PartialEq for OperatorCredentialReissueRefusal

fn eq(&self, other: &OperatorCredentialReissueRefusal) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for OperatorCredentialReissueRefusal

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OperatorCredentialReissueRefusal