Struct SignerRegistry 

pub struct SignerRegistry { /* private fields */ }

Mutable signer registry attached to a SIGNED_BY collection.

Invariants:

1. allowed is the exact set of keys that may produce new signatures. Empty set ⇒ collection rejects every insert (the runtime treats an empty SIGNED_BY list as a parse error, so in practice this only happens after every key is revoked — intentional kill-switch behaviour).
2. history is append-only. add_signer / revoke_signer push new entries; nothing ever pops.
3. add_signer of an already-allowed key is a no-op (no history entry written) so that idempotent DDL replays don’t flood the log. revoke_signer of an unknown key returns false.

Implementations

impl SignerRegistry

pub fn from_initial( initial: &[[u8; 32]], actor: impl Into<String>, ts_unix_ms: u128, ) -> Self

Build a registry from the initial SIGNED_BY (...) list parsed at CREATE COLLECTION time. Each key receives one SignerHistoryAction::Add entry with the supplied actor / timestamp so the audit trail is non-empty from genesis.

pub fn from_persisted_parts( allowed: Vec<[u8; 32]>, history: Vec<SignerHistoryEntry>, ) -> Self

Rebuild a registry from previously-persisted state. Used by the runtime adapter when loading the registry off red_config — the caller is responsible for the storage format; this constructor only stitches the in-memory invariants back together.

pub fn allowed(&self) -> impl Iterator<Item = &[u8; 32]>

Snapshot of the currently-allowed signers, in stable order.

pub fn allowed_len(&self) -> usize

pub fn history(&self) -> &[SignerHistoryEntry]

pub fn is_allowed(&self, pubkey: &[u8; 32]) -> bool

pub fn ever_added(&self, pubkey: &[u8; 32]) -> bool

Returns true if this key was added at any point in the past (even if later revoked). Used by verify_insert to distinguish UnknownSigner from RevokedSigner.

pub fn add_signer( &mut self, pubkey: [u8; 32], actor: impl Into<String>, ts_unix_ms: u128, ) -> bool

Add pubkey to the allowed set. Returns true if the key was newly added (history entry written), false if it was already allowed (idempotent no-op).

pub fn revoke_signer( &mut self, pubkey: &[u8; 32], actor: impl Into<String>, ts_unix_ms: u128, ) -> bool

Remove pubkey from the allowed set. Returns true if the key was present (and a Revoke history entry written), false if it was unknown. Past rows signed by pubkey remain valid and re-verifiable — only future inserts are rejected.

Trait Implementations

impl Clone for SignerRegistry

fn clone(&self) -> SignerRegistry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignerRegistry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SignerRegistry

fn default() -> SignerRegistry

Returns the “default value” for a type.

impl PartialEq for SignerRegistry

fn eq(&self, other: &SignerRegistry) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SignerRegistry

impl StructuralPartialEq for SignerRegistry