Crate saddle_core 

Stable contracts shared by Saddle components.

Business applications should depend on the saddle facade instead of this crate directly.

Structs

ApplicationId

CallContext

The minimum identity propagated through Service, DB and Observability in V1.

CanonicalSignedFiveLeafGenerationV2Input

Complete signed input consumed by the only v2 verifier. The bytes and detached signature are returned intact on every failure.

FiveLeafGenerationV2NonAuthorityView

FiveLeafV2SignerResponse

Untrusted detached signer output captured as one opaque value. Authority is conferred only by verify_five_leaf_v2_signing_response.

FiveLeafV2SigningRequest

A checked, by-value request for an external custody service. It is not a signing authority and intentionally exposes no field or clone operation.

ModuleId

OperationId

SaddleError

An error safe to propagate across Saddle component boundaries.

ServiceId

SpanId

TraceId

VerifiedComponentGenerationPairingReceipt

Single-use equality receipt. It carries no numeric getter and cannot be constructed, cloned or serialized by a consumer.

VerifiedFiveLeafGenerationV2Owner

VerifiedFiveLeafGenerationV2PairedOwner

VerifiedFiveLeafV2SignerPolicyOwner

Approved public-key applicability. This checkpoint deliberately provides no production issuer: key approval and custody remain external STOP assets.

VerifiedFiveLeafV2SigningRequestApprovalOwner

Single-use request reservation produced in the same receipt transaction as the signer policy. It has no raw nonce constructor or getter.

VerifiedGeneratedComponentGenerationOwner

Nominal half issued from one approved canonical five-leaf receipt.

VerifiedGeneratedComponentGenerationV2FinalTransaction

VerifiedGeneratedComponentGenerationV2Owner

VerifiedGenerationKeyApplicabilityReceipt

Applicability for the repository-external approved five-leaf generation signing key. Production construction intentionally remains outside this repository.

VerifiedObservabilityCapacityView

VerifiedSignedDeploymentGenerationOwner

Nominal half issued by the signed deployment applicability verifier.

Enums

ErrorKind

Stable error categories used at component and Service boundaries.

FiveLeafV2SigningError

GenerationPairError

Traits

ComponentLifecycle

Object-safe lifecycle contract used by the Saddle application assembler.

Functions

begin_generated_component_generation_v2_final_transaction

bind_generated_component_generation

Consumes the signed half and binds it to Admission’s actual five-leaf composition. No compared fact is returned to the caller.

bind_generated_component_generation_v2

consume_component_generation_pairing

Final consumption is deliberately fact-free: all equality and provenance checks occurred while both opaque halves were present.

pair_component_generation

Consumes both nominal halves. No raw compare oracle is exposed.

pair_verified_five_leaf_generation_v2

prepare_five_leaf_v2_signing_request

Checks the exact production observation and policy-bound subject before an external signing request may leave Gate custody. The policy is returned so the same non-clone owner must later authorize the response.

restore_generated_component_generation_v2_final_transaction

verify_approved_five_leaf_generation_v2

Verifies the only accepted v2 signed subject and returns one indivisible owner containing both the aggregate and Observability constituent halves.

verify_five_leaf_v2_signing_response

The only authority-upgrading response verifier. Every rejection restores all three opaque inputs for an original-pair retry.

Type Aliases

LifecycleFuture

Result