Struct Manifest 

pub struct Manifest {
    pub schema_version: u32,
    pub sequence: u64,
    pub generated_at: String,
    pub expires_at: Option<String>,
    pub min_runtime_version: String,
    pub components: Vec<ManifestComponent>,
    pub signature: Option<String>,
}

The top-level manifest structure.

Contains metadata (schema version, sequence, timestamps) and a list of component entries.

Fields

schema_version: u32

sequence: u64

Monotonically increasing sequence number for anti-rollback.

generated_at: String

ISO 8601 timestamp of when the manifest was generated.

expires_at: Option<String>

ISO 8601 timestamp after which the manifest is considered stale. None means the manifest never expires.

min_runtime_version: String

Minimum runtime version required to process this manifest.

components: Vec<ManifestComponent>

The component entries.

signature: Option<String>

HMAC-SHA256 signature over the canonical JSON body (excludes this field).

Implementations

impl Manifest

pub fn from_json(json: &str) -> Result<Self>

Parse a manifest from a JSON string.

pub fn to_json(&self) -> Result<String>

Serialize the manifest to a canonical JSON string.

pub fn load_baseline() -> Result<Self>

Load the bundled baseline manifest compiled into the binary.

pub fn compute_signature(&self) -> String

Compute the HMAC-SHA256 signature over the manifest body.

The signature covers all fields except the signature field itself. We produce a canonical JSON representation without the signature, then compute HMAC-SHA256.

pub fn verify_signature(&self) -> Result<(), ManifestTrustError>

Verify the manifest’s signature.

Returns Ok(()) if the signature is present and valid. Returns Err(ManifestTrustError::SignatureVerificationError) otherwise.

pub fn verify_schema_version(&self) -> Result<(), ManifestTrustError>

Check the schema version against the minimum supported version.

Returns Ok(()) if schema_version >= MIN_SCHEMA_VERSION.

pub fn verify_expiry(&self) -> Result<(), ManifestTrustError>

Check the manifest expiry.

Returns Ok(()) if the manifest has no expiry or has not expired. Returns Err(ManifestTrustError::ManifestExpiredError) if expired.

pub fn verify_trust(&self) -> Result<(), ManifestTrustError>

Run all trust checks: signature, schema version, and expiry.

Returns the first error encountered, or Ok(()) if all pass.

Trait Implementations

impl Clone for Manifest

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Manifest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Manifest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Manifest

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Manifest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Manifest