Struct Proof 

pub struct Proof {
    pub leaf_count: u32,
    pub siblings: Vec<Hash>,
}

A BMT inclusion proof for one or more leaves: the tree’s leaf count plus the deduplicated sibling digests needed to reconstruct the root, ordered level-major (bottom-up) then index-ascending.

Bytes are u32 BE leaf_count ‖ LEB128-varint(n) ‖ n × 32-byte digest — byte-identical to commonware_storage::bmt::Proof<D> at the pinned 2026.9.0 train (tests::proofs_match_commonware pins this; see also rust/tests/golden/proofs/). A commonware-based verifier can decode these bytes with the upstream type directly.

Fields

leaf_count: u32

The number of leaves in the tree. Incorporated into the finalized root, so a mismatched leaf_count fails verification rather than being silently accepted (malleability guard).

siblings: Vec<Hash>

The deduplicated sibling digests, level-major bottom-up then index-ascending, with self-duplicate and already-proven siblings omitted (see docs/specs/SPEC-MERKLE-OBJECTS.md §5.3).

Implementations

impl Proof

pub fn encode(&self) -> Vec<u8>

Encode to the commonware-identical wire bytes.

pub fn decode(bytes: &[u8], max_items: usize) -> Result<Self, MerkleError>

Decode from the commonware-identical wire bytes, bounding the sibling count to max_items * MAX_LEVELS. max_items should be the number of positions the caller is about to verify (1 for a single-leaf proof, the range length for a range proof, the position count for a multi-proof). Rejects trailing bytes.

Errors

MerkleError::MalformedProof on a truncated buffer, an over-max_items sibling count, or trailing bytes.

Trait Implementations

impl Clone for Proof

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Proof

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Proof

fn default() -> Self

Returns the “default value” for a type.

impl EncodeSize for Proof

fn encode_size(&self) -> usize

Returns the encoded size of this value (in bytes).

fn encode_inline_size(&self) -> usize

Returns the encoded size excluding bytes passed to BufsMut::push during Write::write_bufs. Used to size the working buffer for inline writes. Override alongside Write::write_bufs for types where large Bytes fields go via push; failing to do so will over-allocate.

impl Eq for Proof

impl PartialEq for Proof

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Read for Proof

type Cfg = usize

The maximum number of items being proven. The upper bound on sibling hashes is derived as max_items * MAX_LEVELS, bounding allocation before any hashing happens.

fn read_cfg( reader: &mut impl Buf, max_items: &Self::Cfg, ) -> Result<Self, CodecError>

Reads a value from the buffer using the provided configuration cfg.

impl StructuralPartialEq for Proof

impl Write for Proof

fn write(&self, writer: &mut impl BufMut)

Writes the binary representation of self to the provided buffer buf.

fn write_bufs(&self, buf: &mut impl BufsMut)

Writes to a BufsMut, allowing existing Bytes chunks to be appended via BufsMut::push instead of written inline. Must encode to the same format as Write::write. Defaults to Write::write.