Enum OrgRevocationError 

pub enum OrgRevocationError {
    InvalidBundle(OrgError),
    MissingState {
        path: String,
    },
    CorruptState {
        path: String,
        detail: String,
    },
    UnsupportedVersion {
        path: String,
        found: u32,
    },
    Io {
        path: String,
        reason: String,
    },
    DurabilityUncertain {
        path: String,
        reason: String,
    },
    Poisoned {
        path: String,
    },
    NonMonotonicReplacement {
        path: String,
    },
    BackingIdentityConflict {
        path: String,
    },
}

Errors from the persisted revocation store.

Variants

InvalidBundle(OrgError)

The incoming bundle failed signature or structural verification. Persisted last-good state is retained.

MissingState

No persisted maxima file at startup. Absence is silently weaker floors, so startup must not proceed; only net node adopt creates the file.

Fields

path: String

Where the state file was expected.

CorruptState

The persisted maxima file exists but cannot be trusted (parse failure, duplicate keys). LOUD startup failure.

Fields

path: String

The state file’s path.

detail: String

What failed to parse or validate.

UnsupportedVersion

The persisted file’s format version is unknown to this build.

Fields

path: String

The state file’s path.

found: u32

The version the file declares.

Io

Filesystem failure while reading or durably writing. When raised from apply_bundle this is always PRE-rename: the old file and old live view are both intact.

Fields

path: String

The path being read or written.

reason: String

The underlying I/O error.

DurabilityUncertain

The rename LANDED but the parent-directory fsync failed — the directory entry may or may not survive a crash, so disk and memory can no longer be proven synchronized. The store publishes the merged (never-weaker) live view, then poisons the BACKING PATH: same-path operations are refused until recovery — a locked reread republished through the shared core plus a SUCCESSFUL parent-directory fsync — re-establishes ground truth (review-8 §13, review-9). A restart is one route to that recovery, not the contract.

Fields

path: String

The state file’s path.

reason: String

The underlying fsync error.

Poisoned

A previous apply ended post-rename durability-uncertain (see Self::DurabilityUncertain) and recovery has not yet succeeded; same-path reloads and opens are refused until a locked reread plus a successful parent-directory fsync clears the uncertainty.

Fields

path: String

The state file’s path.

NonMonotonicReplacement

A running node refused to swap its installed revocation store for one whose live view is lower on some (org, member) key — an installed floor never lowers (review-8 §4). Reload higher floors through OrgRevocationStore::apply_bundle instead of replacing the store.

Fields

path: String

The candidate store’s state-file path.

BackingIdentityConflict

R2-4: this backing path is already bound, for the lifetime of a live core, to a DIFFERENT .lock sidecar identity than the one just opened — the sidecar was recreated or replaced underneath a core that same-path siblings still hold. Joining under the new identity would fork the path into two independent security views, so it is refused loudly.

Fields

path: String

The normalized state-file path whose sidecar identity changed.

Trait Implementations

impl Debug for OrgRevocationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for OrgRevocationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for OrgRevocationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<OrgRevocationError> for OrgAuthorityError

fn from(e: OrgRevocationError) -> Self

Converts to this type from the input type.