Struct ApprovalEngine 

pub struct ApprovalEngine { /* private fields */ }

In-memory (never persisted) approval state. One-time approvals are digest-bound and consumed exactly once under a mutex, including under concurrent requests. Session grants are narrow, expiring and revocable.

Implementations

impl ApprovalEngine

pub fn new() -> Self

pub fn grant_once(&self, digest: [u8; 32]) -> Instant

Record a one-time approval bound to an operation digest.

pub fn consume_once(&self, digest: [u8; 32]) -> Result<Instant, ApprovalError>

Consume a one-time approval atomically. Fails closed on expiry or a missing/mismatched digest.

pub fn grant_session(&self, key: SessionGrantKey) -> Instant

Register a narrow session grant for an exact table set.

pub fn session_covers(&self, key: &SessionGrantKey) -> bool

Does an unexpired session grant cover exactly this table set?

pub fn revoke_sessions(&self, filter: SessionRevokeFilter) -> usize

Revoke matching session grants. Empty filter fields match everything.

pub fn snapshot_sessions(&self) -> Vec<(SessionGrantKey, Instant)>

pub fn pending_one_shots(&self) -> usize

Trait Implementations

impl Default for ApprovalEngine

fn default() -> Self

Returns the “default value” for a type.