Struct ReadableCapability 

pub struct ReadableCapability<T> { /* private fields */ }

Read-only bounds-checked capability. The Write permission bit is silently stripped at construction; no write() method exists.

Layout (24 bytes):

ptr:    *const T   (8 bytes) - base address
base:   usize      (8 bytes) - lower bound (often equals ptr)
length: u32        (4 bytes) - bytes from base
perms:  u32        (4 bytes) - permission bitmask + sealed bit;
                                Write bit guaranteed cleared

Implementations

impl<T> ReadableCapability<T>

pub const SIGNATURE: AxisMask

Direction signature of ReadableCapability<T>. Engages the K_bounds axis (runtime base / length / permissions stored at slot for CHERI-style bounds enforcement on every deref).

pub unsafe fn new( ptr: *const T, base: usize, length: u32, perms: u32, ) -> Result<Self, CapabilityError>

Safety

Caller guarantees [base, base + length) is valid memory for the lifetime of this capability and ptr lies within that region. The Write permission bit is silently stripped.

pub fn from_slice(slice: &[T], perms: u32) -> (ReadableCapability<T>, &[T])

Safe constructor: build a read-only capability over a borrowed slice. Write bit silently stripped.

pub fn has_permission(&self, p: CapabilityPermission) -> bool

pub fn is_sealed(&self) -> bool

pub fn sealed(self) -> Self

pub fn unsealed(self) -> Self

pub fn read(&self) -> Result<T, CapabilityError>

where T: Copy,

Read the value through the capability.

pub fn narrow( &self, sub_base: usize, sub_length: u32, sub_perms: u32, ) -> Result<Self, CapabilityError>

Narrow this capability to a sub-range. Write bit is silently stripped (Readable cannot grant Write).

Trait Implementations

impl<T: Clone> Clone for ReadableCapability<T>

fn clone(&self) -> ReadableCapability<T>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T: Copy> Copy for ReadableCapability<T>

impl<T: Debug> Debug for ReadableCapability<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.