Struct VerifiedSubnetContext 

pub struct VerifiedSubnetContext {
    pub authority: EntityId,
    pub attachment: TopologySubnetId,
    pub scope: TopologySubnetId,
    pub topology_epoch: u32,
    pub subject: EntityId,
    pub subject_node: u64,
    pub session_id: u64,
    pub rights: SubnetRights,
    pub generation: u32,
    pub subnet_auth_epoch: u64,
    pub expires_at: u64,
    pub credential_set_hash: [u8; 32],
}

Immutable per-session authority compiled once at admission and read by the packet path (SUBNET_AUTH_PLAN.md D5/D6).

Forwarding consumes only this: authority equality, one fixed-width prefix comparison, two epoch comparisons, an expiry check, and a rights-bit test. No signature verification, chain walk, string parse, allocation, or online lookup.

Fields

authority: EntityId

Authority the credentials verified under.

attachment: TopologySubnetId

The exact admitted topology point — presentation.target.path, verified to lie inside scope.

This, not Self::scope, is where the peer is. A grant scoped at vehicle and presented for vehicle/perception/camera-domain admits the camera domain only; treating scope as the peer’s location would place that one peer everywhere beneath vehicle at once and let a gateway mistake an internal transition for a boundary crossing (or the reverse). Forwarding reads attachment.

scope: TopologySubnetId

Ceiling: the root of the subtree the credential permits. Bounds what attachment may be and what a re-presentation may claim; it is never itself a location.

topology_epoch: u32

Topology epoch verified against.

subject: EntityId

Full subject entity, proven by signature this session.

subject_node: u64

Routing derivative of subject, derived once after verification (never used to establish identity).

session_id: u64

Session incarnation this context belongs to.

rights: SubnetRights

Rights granted for this session.

generation: u32

Leaf generation at verification time.

subnet_auth_epoch: u64

Authority auth epoch at verification time.

expires_at: u64

Leaf expiry (unix seconds, exclusive).

credential_set_hash: [u8; 32]

Hash binding the exact credentials that produced this context.

Implementations

impl VerifiedSubnetContext

pub fn allows( &self, current_topology_epoch: u32, current_subnet_auth_epoch: u64, now_secs: u64, target: TopologySubnetId, right: SubnetRights, ) -> bool

The D6 hot-path check: is right authorized for target right now? Pure integer work over immutable state.

Trait Implementations

impl Clone for VerifiedSubnetContext

fn clone(&self) -> VerifiedSubnetContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedSubnetContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for VerifiedSubnetContext

impl PartialEq for VerifiedSubnetContext

fn eq(&self, other: &VerifiedSubnetContext) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for VerifiedSubnetContext