Struct ProvStamp 

pub struct ProvStamp {
    pub bundle_id: String,
    pub version: String,
    pub combined_hash: String,
}

The provenance stamp on EVERY served tool result (success AND error envelope) — the bundle_id@version identity plus the combined_hash integrity anchor (Codex HIGH #3).

Constructed from a verified WorkbookBundle::stamp (pmcp_workbook_runtime::BundleLock) by ProvStamp::from_bundle. The combined_hash field carries pmcp_workbook_runtime::BundleLock::combined — NOT pmcp_workbook_runtime::BundleLock::workbook_hash (the source-workbook hash). The two MUST never be conflated: combined_hash flips when ANY bundle artifact changes, binding the response to the exact verified bundle. The field names ARE the wire contract (pinned by tests/workbook_provstamp_contract.rs), so the serde derives serialize the stamp directly — every projection (to_json, the workbook:// URI payload, the advertised schema) shares this one definition.

Fields

bundle_id: String

The neutral bundle identifier (e.g. "tax-calc").

version: String

The semver version (e.g. "1.1.0").

combined_hash: String

The BUNDLE.lock COMBINED hash-of-hashes (NEVER the source-workbook hash — Codex HIGH #3).

Implementations

impl ProvStamp

pub fn from_bundle(bundle: &WorkbookBundle) -> Self

Build the served provenance stamp from a verified WorkbookBundle.

The combined_hash is taken from bundle.stamp.combined (the BUNDLE.lock combined hash-of-hashes) — explicitly NOT bundle.stamp.workbook_hash, so the served stamp can never carry the source-workbook hash (Codex HIGH #3).

pub fn to_json(&self) -> Value

The stamp as a JSON object attached to every result payload.

Trait Implementations

impl Clone for ProvStamp

fn clone(&self) -> ProvStamp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProvStamp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProvStamp

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ProvStamp

impl PartialEq for ProvStamp

fn eq(&self, other: &ProvStamp) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProvStamp

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ProvStamp