Struct Checked 

pub struct Checked<'r, 'p, 'a, 'c, S> { /* private fields */ }

Completed mechanism facts relative to the caller’s authenticated context. Original issuance/holder/status references remain required; only the new eligibility catalogue is independently owned. This is not an application authorization grant or proof that opaque callback/backend costs are bounded.

Implementations

impl<'r, 'p, 'a, 'c, S> Checked<'r, 'p, 'a, 'c, S>

pub fn certificate(&self) -> &'r AttributeCertificate<'c>

Exact original AC whose complete use requirements produced this receipt. This does not authorize substitution of another equal-looking AC.

pub fn authority(&self) -> &Authority<'r, 'p, 'a, 'c>

Original authenticated issuance and selected trust route.

pub fn holder(&self) -> &Holder<'r, 'p, 'a, 'c>

Actual authenticated holder input, not another later certificate.

pub fn status(&self) -> &'r S

Original evidence whose association/time/status checks completed.

pub fn evaluated_at(&self) -> Reading

Exact evaluation label, including subnanosecond precision.

pub fn target(&self) -> Option<usize>

Original matching target ordinal; None means no targeting was written.

pub fn proxy(&self) -> Option<usize>

Original common proxy-set ordinal; None means no ProxyInfo was written.

pub fn attributes(&self) -> &[AttributeUse]

Complete original attribute catalogue and per-type restriction results. Caller traversal/output must be admitted by its own operation.

pub fn allows<W: Work>(&self, kind: Oid<'_>, work: &W) -> Result<Permission>

Apply the same authenticated controls to an actual caller-decrypted type. This does not prove decryption or ACClearAttrs issuer/serial binding.

Trait Implementations

impl<'r, 'p, 'a, 'c, S: Debug> Debug for Checked<'r, 'p, 'a, 'c, S>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.