Enum SignatureState 

pub enum SignatureState {
    Signed {
        signer: String,
        anchored: bool,
    },
    Unsigned,
}

Outcome of verifying the vault’s Ed25519 signature at load time.

An invalid signature never reaches here — it fails the load as tampering. So the working state distinguishes “signed” from “unsigned” (integrity then rests on git). The binary warns on Unsigned, and on a Signed that is not yet anchored.

Variants

Signed

A valid signature produced by signer (a current recipient).

anchored is whether the signer’s verifying key is trusted independently of the (attacker-mutable) meta registry: always true for ssh-ed25519 signers (the key is in the recipient string), and true for age signers whose key matched a prior local pin. When false — an age signer’s key seen for the first time on this machine — the signature is trust-on-first-use, not yet authenticated authorship; git commit signing is the anchor.

Fields

signer: String

anchored: bool

Unsigned

No signature present — the last writer had no signing-capable identity.

Trait Implementations

impl Clone for SignatureState

fn clone(&self) -> SignatureState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignatureState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SignatureState

fn default() -> SignatureState

Returns the “default value” for a type.

impl Eq for SignatureState

impl PartialEq for SignatureState

fn eq(&self, other: &SignatureState) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SignatureState