pub struct CeremonyGuardApproval { /* private fields */ }Expand description
A human guard, and who let it through.
The engine used to record that a guard had been approved and not by whom. That is the one fact a receipt cannot do without: an approval with no approver is indistinguishable from nobody having looked, which is exactly what the deferral beside it already refuses to be.
It records a seat rather than a person. Who filled it is the host’s to know — this engine has roles, and a host that binds people to them can say more. Recording the seat and letting the host name the person is the honest division; inventing a person here would not.
What kind of party filled it is declared by whoever made the call, and is not inferred here. A guard requiring human approval says a human was required, not that one turned up, and reading compliance off the requirement is the exact shape of receipt this engine refuses to write.
Implementations§
Source§impl CeremonyGuardApproval
impl CeremonyGuardApproval
pub fn record( guard_name: GuardName, approved_by: RoleId, approved_by_kind: AuditActorKind, approved_at: OffsetDateTime, ) -> Self
pub fn guard_name(&self) -> &GuardName
pub fn approved_by(&self) -> &RoleId
Sourcepub fn approved_by_kind(&self) -> AuditActorKind
pub fn approved_by_kind(&self) -> AuditActorKind
What kind of party the caller says filled the seat.
Declared, never deduced. An approval recorded as human because the guard asked for one would assert the very thing nobody can demonstrate.
pub fn approved_at(&self) -> OffsetDateTime
Trait Implementations§
Source§impl Clone for CeremonyGuardApproval
impl Clone for CeremonyGuardApproval
Source§fn clone(&self) -> CeremonyGuardApproval
fn clone(&self) -> CeremonyGuardApproval
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more