Struct GithubSignedCleanupEvidenceV1 

pub struct GithubSignedCleanupEvidenceV1 {

    pub schema_version: u32,
    pub provider: String,
    pub operation_id: String,
    pub job_id: String,
    pub execution_repository: String,
    pub execution_repository_id: u64,
    pub request_sha256: String,
    pub source_repository: String,
    pub source_revision: String,
    pub source_sha256: String,
    pub dispatch_revision: String,
    pub run: GithubRunIdentityV1,
    pub compile_evidence_sha256: String,
    pub manifest_sha256: String,
    pub signing_report_sha256: String,
    pub validation_report_sha256: String,
    pub github_artifact_id: u64,
    pub github_artifact_api_sha256: String,
}

Secret-free proof that one exact signed GitHub run attempt completed protected cleanup.

The production verifier creates this envelope only after independently validating the compile handoff, worker manifest, signing report, validation report, and every protected-cleanup flag. It is scoped to the immutable provider-bound attempt; a later GitHub rerun is a distinct attempt and neither replaces nor invalidates this evidence.

Fields

schema_version: u32

Evidence schema version; currently 1.

provider: String

Stable provider identifier.

operation_id: String

Caller operation identifier.

job_id: String

Provider job identifier.

execution_repository: String

Canonical GitHub execution repository URL.

execution_repository_id: u64

Stable database ID of the exact execution repository.

request_sha256: String

Canonical SHA-256 of the complete submitted request.

source_repository: String

Exact configured source repository URL.

source_revision: String

Exact requested source revision.

source_sha256: String

Exact verified source-manifest SHA-256.

dispatch_revision: String

Exact dispatched commit.

run: GithubRunIdentityV1

Full immutable GitHub run identity and attempt that emitted the evidence.

compile_evidence_sha256: String

SHA-256 of canonical serialized compile-phase evidence.

manifest_sha256: String

SHA-256 of the exact immutable worker manifest bytes.

signing_report_sha256: String

SHA-256 of the exact protected signing-report bytes.

validation_report_sha256: String

SHA-256 of the exact independently generated validation-report bytes.

github_artifact_id: u64

Stable numeric ID of the exact final GitHub Actions artifact.

github_artifact_api_sha256: String

GitHub API SHA-256 of the exact final outer artifact ZIP.

Implementations

impl GithubSignedCleanupEvidenceV1

pub fn validate_for_resume( &self, resume: &GithubJobResumeV1, ) -> RemoteBuildResult<()>

Validate this proof against every durable identity and artifact digest in a resume record.

Errors

Rejects replay across repositories, requests, sources, dispatches, jobs, runs, attempts, or verified artifact sets.

Trait Implementations

impl Clone for GithubSignedCleanupEvidenceV1

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GithubSignedCleanupEvidenceV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for GithubSignedCleanupEvidenceV1

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for GithubSignedCleanupEvidenceV1

impl PartialEq for GithubSignedCleanupEvidenceV1

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for GithubSignedCleanupEvidenceV1

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for GithubSignedCleanupEvidenceV1