Struct PluginTrustPolicy 

pub struct PluginTrustPolicy {
    pub official_key_fingerprints: &'static [&'static str],
    pub revoked: &'static [PluginRevocation],
    pub require_digest: bool,
}

A small, dependency-free trust policy for plugin bytes. 一个零依赖的插件字节信任策略。

This is intentionally a checksum and key-fingerprint policy, not a home-grown signature scheme. Signature verification belongs in the adapter that loads a plugin; NichLink only decides whether the verified identity is allowed to enter this registry. 这里刻意只做摘要和公钥指纹策略，不伪造签名算法。真正的签名校验由加载插件的 adapter 完成，NichLink 只判断已校验身份是否可以进入注册树。

Fields

official_key_fingerprints: &'static [&'static str]

SHA-256 fingerprints of keys trusted to sign official plugins. 被信任可为官方插件签名的密钥 SHA-256 指纹。

revoked: &'static [PluginRevocation]

Revocations that refuse a package/version pair outright. 直接拒绝某个包/版本组合的撤销条目。

require_digest: bool

Whether the manifest checksum must be a SHA-256 digest. manifest 摘要是否必须是 SHA-256 值。

Implementations

impl PluginTrustPolicy

pub const fn open() -> PluginTrustPolicy

Development policy: no trusted keys and no digest requirement. 开发态策略：没有信任密钥，也不强制摘要。

pub const fn official( keys: &'static [&'static str], revoked: &'static [PluginRevocation], ) -> PluginTrustPolicy

Policy that requires a digest and trusts only the listed official keys. 强制摘要、且只信任所列官方密钥的策略。

pub fn verify( self, manifest: PluginManifest, bytes: &[u8], key_fingerprint: Option<&str>, ) -> Result<(), PluginTrustError>

Run the checksum, revocation, and official-key checks; does no signature work. 执行摘要、撤销与官方密钥检查；本身不做签名运算。

pub fn verify_with<V>( self, manifest: PluginManifest, bytes: &[u8], key_fingerprint: Option<&str>, verifier: &V, ) -> Result<(), PluginTrustError>

where V: PluginSignatureVerifier,

Verify metadata and delegate the actual signature operation to the host. 校验元数据，并把真正的签名操作委托给宿主。

Trait Implementations

impl Clone for PluginTrustPolicy

fn clone(&self) -> PluginTrustPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PluginTrustPolicy

impl Debug for PluginTrustPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for PluginTrustPolicy

impl PartialEq for PluginTrustPolicy

fn eq(&self, other: &PluginTrustPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PluginTrustPolicy