Struct ApprovalSigner 

pub struct ApprovalSigner { /* private fields */ }

Ed25519 signer that mints provenance signatures for approval_response payloads. Wraps Signer in an Arc so the gRPC service and the connect path share one instance.

Implementations

impl ApprovalSigner

pub fn from_seed(seed: u64) -> Self

Build a signer from a deterministic seed (dev / tests). Production keys come from a secret store; that wiring is a follow-up.

pub fn public_key_bytes(&self) -> Vec<u8>

Encoded public key bytes; clients verify approval signatures against these.

pub fn sign(&self, canonical_bytes: &[u8]) -> Vec<u8>

Sign the canonical bytes of a response payload. The canonical bytes are the JSON encoding with the signature_hex and signed_by fields cleared — same shape as crate::toolcall (signature commits to everything except itself).

Trait Implementations

impl Clone for ApprovalSigner

fn clone(&self) -> ApprovalSigner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for ApprovalSigner

fn default() -> Self

Deterministic seed (V1 only). Production wires this to a secret store; the Default is here purely so callers can compose.