Struct WalletLinkLifecyclePayload 

pub struct WalletLinkLifecyclePayload<'a> {

    pub kind: &'a str,
    pub transition: &'a str,
    pub subject: &'a str,
    pub wallet_address: &'a str,
    pub currency: &'a str,
    pub chain_id: &'a str,
    pub limit_base_units: &'a str,
    pub limit_human: &'a str,
    pub period_secs: &'a str,
    pub expiry_unix: &'a str,
    pub recipients: &'a str,
    pub conversation_id: &'a str,
    pub timestamp: &'a str,
}

The wallet_link_lifecycle field set wallet_link_lifecycle_payload signs, named at the call site (#2123).

Mirrors RefusalPayload’s reasoning: a positional argument list of same-typed &strs invites a silent field swap, so every field is named here instead. One schema version, like RefusalPayload — this event kind ships new, with no prior persisted history to keep verifying.

Fields

kind: &'a str

The event kind the payload is stored under (always polyc_proto::kinds::WALLET_LINK_LIFECYCLE).

transition: &'a str

Which ceremony transition this event records: "linked", "renewed" (limit/expiry updated by complete_update), or "revoked" — each minted by its own success-arm call site in crates/control-plane/src/wallet_link.rs’s complete/ complete_revoke/complete_update, never a caller-chosen string.

subject: &'a str

Opaque principal the ceremony is attributed to — the same status RefusalPayload::subject carries.

wallet_address: &'a str

The linked wallet’s onchain address.

currency: &'a str

Settlement-token contract (hex) the ceremony’s spend cap applies to.

chain_id: &'a str

Decimal string of the chain id the ceremony ran on.

limit_base_units: &'a str

The spend cap in the settlement token’s base units, as a decimal string; empty for "revoked" (no cap to report on a dead link).

limit_human: &'a str

Human-readable spend cap; empty for "revoked".

period_secs: &'a str

Decimal string of the spend cap’s reset period in seconds; empty for "renewed" (TIP-1011’s updateSpendingLimit cannot change the period — see crate::wallet_link::PERIOD_UNCHANGED_NOTICE in the control plane) and for "revoked".

expiry_unix: &'a str

Decimal string of the unix-seconds authorization expiry; empty for "renewed" (the expiry is unchanged, not re-attested — TIP-1011’s updateSpendingLimit never touches it) and for "revoked" (no expiry survives a dead link).

recipients: &'a str

Comma-joined recipient allowlist (TIP-1011); empty means any recipient.

conversation_id: &'a str

The conversation the ceremony was minted and redeemed in — also the journal partition (conv-{conversation_id}) this event is appended to.

timestamp: &'a str

Decimal string of the unix-seconds clock value at the moment the ceremony handler recorded the transition — the payment_refusal.timestamp sibling, divided from a millisecond clock exactly once at the recording seam.

Trait Implementations

impl<'a> Clone for WalletLinkLifecyclePayload<'a>

fn clone(&self) -> WalletLinkLifecyclePayload<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for WalletLinkLifecyclePayload<'a>

impl<'a> Debug for WalletLinkLifecyclePayload<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.