Expand description
Stable contracts shared by Saddle components.
Business applications should depend on the saddle facade instead of this
crate directly.
Structs§
- Application
Id - Call
Context - The minimum identity propagated through Service, DB and Observability in V1.
- Canonical
Signed Five Leaf Generation V2Input - Complete signed input consumed by the only v2 verifier. The bytes and detached signature are returned intact on every failure.
- Diagnostic
- Captures an available synchronous stack once. Capture/symbolization itself is not strictly resource bounded; only retained output is bounded.
- Diagnostic
Cause - Only classified source facts are accepted. Raw driver Display/Debug is absent.
- Diagnostic
Code - A validated static code, never an arbitrary error message or panic payload.
- Diagnostic
Driver Details - Fixed driver details. Numeric positions are zero-based driver facts, not JSON input coordinates. Missing positions remain None.
- Diagnostic
Input Location - Input-document coordinates and a fixed set of logical locators. These are not Rust source coordinates; zero/unavailable values are preserved honestly.
- Diagnostic
Locator - Already escaped source-owner locator. Never accepts driver messages or URLs.
- Diagnostic
Object - The source owner must provide a schema object, never a user value or URL. Validation excludes common credential/path injection syntax; it is not a classifier capable of detecting arbitrary secrets embedded in object names.
- Diagnostic
Type Name - Source-owned type metadata, not an arbitrary driver error message.
- Five
Leaf Generation V2Non Authority View - Five
Leaf V2Signer Response - Untrusted detached signer output captured as one opaque value. Authority is
conferred only by
verify_five_leaf_v2_signing_response. - Five
Leaf V2Signing Request - A checked, by-value request for an external custody service. It is not a signing authority and intentionally exposes no field or clone operation.
- Module
Id - Operation
Id - RpcCorrelation
Id - Validated protocol RPC correlation, distinct from an internal span ID. This value carries identity only; it never allocates a child sequence.
- Saddle
Error - An error safe to propagate across Saddle component boundaries.
- Service
Id - SpanId
- Trace
Correlation Id - TraceId
- Verified
Component Generation Pairing Receipt - Single-use equality receipt. It carries no numeric getter and cannot be constructed, cloned or serialized by a consumer.
- Verified
Five Leaf Generation V2Owner - Verified
Five Leaf Generation V2Paired Owner - Verified
Five Leaf V2Signer Policy Owner - Approved public-key applicability. This checkpoint deliberately provides no production issuer: key approval and custody remain external STOP assets.
- Verified
Five Leaf V2Signing Request Approval Owner - Single-use request reservation produced in the same receipt transaction as the signer policy. It has no raw nonce constructor or getter.
- Verified
Generated Component Generation Owner - Nominal half issued from one approved canonical five-leaf receipt.
- Verified
Generated Component Generation V2Final Transaction - Verified
Generated Component Generation V2Owner - Verified
Generation KeyApplicability Receipt - Applicability for the repository-external approved five-leaf generation signing key. Production construction intentionally remains outside this repository.
- Verified
Observability Capacity View - Verified
Signed Deployment Generation Owner - Nominal half issued by the signed deployment applicability verifier.
Enums§
- Capture
Site - Diagnostic
Category - Diagnostic
Object Kind - Diagnostic
Stage - Diagnostic
Type Unavailable - Why a driver type could not be obtained; never substitute a guessed type.
- Error
Kind - Stable error categories used at component and Service boundaries.
- Five
Leaf V2Signing Error - Generation
Pair Error - Trace
Correlation IdError
Constants§
Traits§
- Component
Lifecycle - Object-safe lifecycle contract used by the Saddle application assembler.
Functions§
- begin_
generated_ component_ generation_ v2_ final_ transaction - bind_
generated_ component_ generation - Consumes the signed half and binds it to Admission’s actual five-leaf composition. No compared fact is returned to the caller.
- bind_
generated_ component_ generation_ v2 - consume_
component_ generation_ pairing - Final consumption is deliberately fact-free: all equality and provenance checks occurred while both opaque halves were present.
- pair_
component_ generation - Consumes both nominal halves. No raw compare oracle is exposed.
- pair_
verified_ five_ leaf_ generation_ v2 - prepare_
five_ leaf_ v2_ signing_ request - Checks the exact production observation and policy-bound subject before an external signing request may leave Gate custody. The policy is returned so the same non-clone owner must later authorize the response.
- restore_
generated_ component_ generation_ v2_ final_ transaction - verify_
approved_ five_ leaf_ generation_ v2 - Verifies the only accepted v2 signed subject and returns one indivisible owner containing both the aggregate and Observability constituent halves.
- verify_
five_ leaf_ v2_ signing_ response - The only authority-upgrading response verifier. Every rejection restores all three opaque inputs for an original-pair retry.