Struct KernelBinding 

#[repr(C)]
pub struct KernelBinding {
    pub manifest_root_hash: [u8; 32],
    pub policy_hash: [u8; 32],
    pub binding_version: u16,
    pub min_runtime_version: u16,
    pub _pad0: u32,
    pub allowed_segment_mask: u64,
    pub _reserved: [u8; 48],
}

128-byte kernel binding record (padded for future evolution).

Layout:

Offset	Size	Field
0x00	32	manifest_root_hash
0x20	32	policy_hash
0x40	2	binding_version
0x42	2	min_runtime_version
0x44	4	_pad0 (alignment)
0x48	8	allowed_segment_mask
0x50	48	_reserved

All multi-byte fields are little-endian on the wire.

Fields

manifest_root_hash: [u8; 32]

SHAKE-256-256 of the manifest root node.

policy_hash: [u8; 32]

SHAKE-256-256 of the policy document.

binding_version: u16

Binding format version (currently 1).

min_runtime_version: u16

Minimum runtime version required (0 = any).

_pad0: u32

Alignment padding (must be zero).

allowed_segment_mask: u64

Bitmask of allowed segment types (0 = no restriction).

_reserved: [u8; 48]

Reserved for future use (must be zero).

Implementations

impl KernelBinding

pub fn to_bytes(&self) -> [u8; 128]

Serialize the binding to a 128-byte array.

pub fn from_bytes(data: &[u8; 128]) -> Self

Deserialize a KernelBinding from a 128-byte slice (unchecked).

Does NOT validate reserved fields. Use from_bytes_validated for security-critical paths that must reject non-zero padding/reserved.

pub fn from_bytes_validated(data: &[u8; 128]) -> Result<Self, &'static str>

Deserialize and validate a KernelBinding from a 128-byte slice.

Rejects bindings where:

• binding_version is 0 (uninitialized)
• _pad0 is non-zero (spec violation)
• _reserved contains non-zero bytes (spec violation / data smuggling)

Trait Implementations

impl Clone for KernelBinding

fn clone(&self) -> KernelBinding

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelBinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for KernelBinding

fn eq(&self, other: &KernelBinding) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for KernelBinding

impl Eq for KernelBinding

impl StructuralPartialEq for KernelBinding