Enum HandleIdentity 

pub enum HandleIdentity {
    Credentialless,
    CatalogUser {
        username: String,
        user_id: u64,
        created_version: u64,
    },
    ServicePrincipal {
        token_id: String,
        principal_id: [u8; 16],
        creation_version: u64,
    },
}

The per-caller identity bound to one handle (spec §10.1, S1A-001).

Catalog identities pin one user generation and are re-resolved against the live catalog on each authorized operation. Service identities pin a registered token generation (token_id + principal_id + creation_version) and re-resolve live scopes from the shared core’s service-principal store on each authorize (P0.1).

Variants

Credentialless

No credentials were supplied for this handle.

CatalogUser

A user resolved from the database catalog. user_id + created_version pin the exact catalog generation so username reuse cannot revive a stale identity.

Fields

username: String

user_id: u64

created_version: u64

ServicePrincipal

An authenticated service principal. Authority is re-resolved live from the shared core; the handle never freezes a caller-supplied permission vector.

Fields

token_id: String

principal_id: [u8; 16]

creation_version: u64

Trait Implementations

impl Clone for HandleIdentity

fn clone(&self) -> HandleIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HandleIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for HandleIdentity

impl PartialEq for HandleIdentity

fn eq(&self, other: &HandleIdentity) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for HandleIdentity