Struct MaintenancePolicy 

pub struct MaintenancePolicy {
    pub schema_version: u16,
    pub policy_id: String,
    pub policy_version: u64,
    pub require_authentication: bool,
    pub require_authorization: bool,
    pub require_fencing_token: bool,
    pub max_request_lifetime_millis: u64,
    pub resource_budget: MaintenanceResourceBudget,
    pub principal_bindings: Vec<MaintenancePrincipalBinding>,
    pub role_grants: Vec<MaintenanceRoleGrant>,
}

Versioned fail-closed maintenance policy.

Fields

schema_version: u16

Policy schema version.

policy_id: String

Stable policy identifier used by audit records.

policy_version: u64

Monotonically increasing policy version.

require_authentication: bool

Authentication must remain enabled for maintenance.

require_authorization: bool

Authorization must remain enabled for maintenance.

require_fencing_token: bool

Every state-changing request must carry a non-zero fencing token.

max_request_lifetime_millis: u64

Maximum allowed request lifetime from authorization time.

resource_budget: MaintenanceResourceBudget

Resource budget enforced by checkpoint coordinators.

principal_bindings: Vec<MaintenancePrincipalBinding>

Authenticated identities and their independent maintenance roles.

role_grants: Vec<MaintenanceRoleGrant>

Role-to-capability grants.

Implementations

impl MaintenancePolicy

pub fn validate(&self) -> Result<(), SecurityContractViolation>

Validates every policy invariant without granting authorization.

Errors

Returns SecurityContractViolation when the policy could authorize an operation without authentication, authorization, fencing, or a bounded resource budget.

pub fn into_validated( self, ) -> Result<ValidatedMaintenancePolicy, SecurityContractViolation>

Consumes a completely validated policy for use by an authorizer.

Errors

Returns SecurityContractViolation for the same fail-closed invariants checked by Self::validate.

Trait Implementations

impl Clone for MaintenancePolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MaintenancePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MaintenancePolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for MaintenancePolicy

impl PartialEq for MaintenancePolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for MaintenancePolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for MaintenancePolicy