plecto_control/manifest/trust.rs
1//! Trust roots (`[trust]`, ADR 000006).
2
3use serde::{Deserialize, Serialize};
4
5/// Trust roots: paths (manifest-relative) to trusted signer public keys, PEM (ADR 000006).
6/// `PartialEq` lets `reload` detect a trust-section change (which it rejects — trust is fixed
7/// at construction, f000004 #1).
8#[derive(Debug, Clone, Default, Deserialize, schemars::JsonSchema, Serialize, PartialEq, Eq)]
9#[serde(deny_unknown_fields)]
10pub struct Trust {
11 #[serde(default)]
12 pub keys: Vec<String>,
13}