Struct GrantEntry 

pub struct GrantEntry {
    pub pubkey: String,
    pub scope: Vec<String>,
    pub issued_at: String,
    pub expires_at: String,
    pub issuer: String,
}

A short-lived agent grant: an ephemeral identity with read access to a narrow set of keys. The grant’s pubkey is also a Vault::recipients entry, and each granted key carries a scoped ciphertext under that pubkey — so the agent’s access is governed (and MAC-covered) by the scoped entries. This record is the audit/TTL layer: it lives in the encrypted meta (so an agent’s existence and scope don’t leak) and is covered by the keyed MAC (blake3v5:) so TTL, scope, and issuer cannot be tampered with undetected.

Fields

pubkey: String

The agent’s ephemeral age public key (also in Vault::recipients).

scope: Vec<String>

Keys this grant can read (the --only set). Display/audit only — actual access is the set of scoped ciphertexts encrypted to pubkey.

issued_at: String

When the grant was issued (ISO-8601 UTC).

expires_at: String

Advisory expiry (ISO-8601 UTC). agent ls flags grants past this; nothing auto-revokes. age keys cannot self-destruct, so the real close is agent revoke + rotate.

issuer: String

Pubkey of the recipient who issued the grant (minimal accountability).

Trait Implementations

impl Clone for GrantEntry

fn clone(&self) -> GrantEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GrantEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GrantEntry

fn default() -> GrantEntry

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for GrantEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for GrantEntry

impl PartialEq for GrantEntry

fn eq(&self, other: &GrantEntry) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for GrantEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for GrantEntry