Struct ExecutorAttestation 

pub struct ExecutorAttestation {
    pub attestation_type: String,
    pub credential: Vec<u8>,
    pub pop: Option<Vec<u8>>,
}

Executor Attestation - a verifiable document attesting executor properties.

Replaces the old ProofOfIdentity with a more flexible structure that supports multiple attestation types and per-attestation PoP.

The attestation_type is a string to allow extensibility. Common values include:

• "spiffe_svid" - SPIFFE SVID (X.509), typically requires PoP
• "vp" - Verifiable Presentation, PoP implicit in VP signature
• "tee_quote" - TEE Quote (SGX, TDX, SEV), hardware-bound
• "jwt" - JWT token
• "x509" - Generic X.509 certificate

The PoP (when present) MUST sign hash(protected_header + payload) to bind the attestation to this specific PoC context, preventing replay attacks.

Fields

attestation_type: String

Attestation type (extensible string, e.g., “spiffe_svid”, “vp”, “tee_quote”)

credential: Vec<u8>

The credential bytes (X.509 cert, VP, TEE quote, JWT, etc.) Contains or references the public key for verification.

pop: Option<Vec<u8>>

Proof of Possession - signature over hash(protected + payload). Present only if the attestation type requires it. The PoP binds this attestation to this specific PoC context.

Implementations

impl ExecutorAttestation

pub fn new( attestation_type: impl Into<String>, credential: Vec<u8>, ) -> ExecutorAttestation

Creates a new attestation without PoP.

Use this for attestation types where PoP is implicit (e.g., VP) or not applicable (e.g., TEE quote).

pub fn with_pop( attestation_type: impl Into<String>, credential: Vec<u8>, pop: Vec<u8>, ) -> ExecutorAttestation

Creates a new attestation with PoP.

Use this for attestation types that require proof of possession (e.g., SPIFFE SVID, X.509 cert, JWT+DPoP).

pub fn has_pop(&self) -> bool

Returns true if this attestation has a PoP.

Trait Implementations

impl Clone for ExecutorAttestation

fn clone(&self) -> ExecutorAttestation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExecutorAttestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ExecutorAttestation

fn deserialize<__D>( __deserializer: __D, ) -> Result<ExecutorAttestation, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ExecutorAttestation

fn eq(&self, other: &ExecutorAttestation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ExecutorAttestation

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ExecutorAttestation