Module scope 

Replay isolation scopes (spec 004, 3.1.3 to 3.1.5).

A scope is a host-configured isolation key for retained evidence, never an authority grant. Its two modes are mutually exclusive; a serialized scope always states its mode and every field of that mode, and a field of the other mode is refused. Principal scope is the default: a missing principal handle is an error, never a downgrade to tenant-only.

Structs

Handle

An opaque, non-secret, non-empty host handle of at most 256 bytes: a tenant, a context revision or a principal scope. Rustev compares handles and nothing else; a raw credential never belongs in one.

HandleError

Why a string is not a scope handle.

Enums

Scope

The isolation scope of a capture, a bundle and every request identity.

Constants

MAX_HANDLE_BYTES

The most bytes of one scope handle.