Module baseline 

Composition of source-bound long-term facts over a format’s stage reports.

Each format supplies its own basic stage and material reports through the traits here. timestamped joins the whole TSA-path census with every signature timestamp’s static association; long_term links the X.509 and credential material reports to the SAME participant census; for each archive archive_material joins that archive’s reports and archives requires one for every original archive. Additional reports never promote a requested level and no report here is a trust verdict.

Structs

ArchiveMaterial

Original X.509 and credential-format material checked BEFORE the SAME archive. Construction requires the same authenticated credential census, not equivalent node IDs or separately selected authority contexts.

Archives

Every original root archive’s paired material facts in source order. The original timestamp census determines the set; a supplied successful subset cannot create it. Historical authority/path contexts remain on each report, since they need not be identical at different original archive times.

LongTerm

Linked original time, X.509 and credential-format material reports. Public input slots cannot manufacture a fact: construction verifies their exact participant receipts, including selected path contexts. This is incorporation/placement, not Good status, chronology, algorithm longevity or caller trust, and cannot by itself assert B-LT acceptance.

Timed

Whole original token/TSA path set plus every root signature-time association. This does not assert pre-revocation chronology, current/historical status, format material completeness, algorithm-obsolescence policy or caller trust. In particular it is NOT an unconditional B-T acceptance verdict.

Enums

ArchiveCensusError

Original processing/admission failure, never a failed document digest.

SignatureTimeFact

One actual root signature timestamp’s complete static certificate binding. Negative results do not disappear because a different timestamp succeeded.

TimeError

Terminal original source/selection/query refusal; no partial timed report.

Traits

ArchiveCensus

A format’s census of one signature’s timestamps, in original order.

BasicStage

A format’s basic stage: the signer and countersignature receipts it was built from, and whether every requirement of the format’s basic level holds.

CredentialMaterial

A format’s credential-material report for one validation-data scope.

X509Material

A format’s whole-signature X.509 material report.

Functions

archive_material

Combine both original material reports for one exact preceding-archive scope. The X.509 report already establishes the original coverage and mathematical token binding; the format report must use that SAME scope and actual authenticated credential input. Neither source work nor provider interpretation is replayed; the fresh metadata query is still admitted.

archives

Require one paired report for EACH original root archive, not only archives whose material happened to succeed. Counter timestamps retain their separate whole-signature TSA obligations; this does not impose root baseline properties on a countersignature. No crypto, source acquisition, artifact lookup, allocation or report copy occurs in this current-query census.

long_term

Link the SAME complete participant/status closure and authenticated credential catalogue to the root/counters/all-token time report. No source parse, signature, credential authentication, status evaluation or artifact lookup is repeated. Earlier-archive subsets cannot stand for whole B-LT. EN319132-1 V1.3.1 §§5.4/6.3(x) require all validation material while keeping status usability and application trust distinct from incorporated presence. https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.03.01_60/en_31913201v010301p.pdf

timestamped

Bind all-token TSA-path facts to the SAME root/counter source and every actual root signature timestamp to the checked signer. Reuses previously established complete generation intervals, not another UTC parse or certificate hash. EN319132-1 §§5.3/6.3(n,o) distinguish the signature timestamp from other kinds and require EACH such timestamp before expiration/revocation. This establishes the static interval part; actual revocation facts stay explicit. https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.03.01_60/en_31913201v010301p.pdf

timestamped_existence

Same complete TSA/static core with one format-authorized archive input as the fallback existence time when no root signature timestamp is written. The format issuer supplies the original archive property, not the caller. EN319142-1 §6.3 allows PAdES document timestamps for this purpose; default XAdES/CAdES composition continues to require its signature timestamp kind. https://www.etsi.org/deliver/etsi_EN/319100_319199/31914201/01.02.01_60/en_31914201v010201p.pdf

Type Aliases

ArchiveMaterialResult

Source, scope or input-receipt refusal, not a missing-material finding.

ArchivesResult

Complete original root-archive material census or a typed processing refusal.

MaterialResult

A different scope/input receipt is a processing refusal, not absent material.

TimeResult

Complete original static time facts in the query’s identity domain.