Struct Policy 

pub struct Policy {
    pub default_alg: String,
    pub allow_algs: Vec<String>,
    pub required_signatures: Option<RequiredSignatures>,
    pub offline_ok: bool,
    pub require_fips_only: bool,
    pub require_level5: bool,
    pub digest_alg: String,
    pub allow_lower_levels: bool,
}

Signing policy describing allowed algorithms and approval requirements.

Fields

default_alg: String

Default algorithm identifier (e.g., “mldsa-87”).

allow_algs: Vec<String>

Whitelist of allowed algorithms.

required_signatures: Option<RequiredSignatures>

Optional multi-party signature quorum requirement.

offline_ok: bool

Whether signing is permitted without network transparency.

require_fips_only: bool

Enforce FIPS-approved algorithms only (defaults to true).

require_level5: bool

Enforce NIST PQC Level-5 defaults when true (default).

digest_alg: String

Digest algorithm (sha512 or shake256-64 for Level-5).

allow_lower_levels: bool

Explicit escape hatch for non-Level-5 algorithms.

Implementations

impl Policy

pub fn canonical_hash(&self) -> [u8; 32]

Compute a canonical SHA-256 hash of the policy for inclusion in intents.

pub fn ensure_fips(&self, allow_nonfips: bool) -> Result<(), ValidationError>

Enforce that non-FIPS algorithms are not used when policy forbids it.

pub fn enforce_level5(&self) -> Result<(), ValidationError>

Enforce Level-5 defaults when required.

pub fn ensure_quorum(&self, collected: usize) -> Result<(), ValidationError>

Validate that the collected signatures satisfy the quorum constraint.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Policy

fn eq(&self, other: &Policy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Policy

impl StructuralPartialEq for Policy