Enum EventIdentity 

pub enum EventIdentity<'a> {
    LegacyV1,
    V2 {
        caller_principal: &'a str,
    },
}

Encoding generation of an approval-event row, mirroring what ChainIdentity does for transaction rows: the audit_events.chain_version column selects, per row, which message its signature was made over, so rows written by an older binary keep verifying (#249).

A downgrade is not a hiding place, for the same reason as on the transaction chain: rewriting a V2 row as LegacyV1 (to erase caller_principal) makes verification re-encode it without the identity fields, the stored signature no longer matches, and the row reports Broken.

Variants

LegacyV1

chain_version = 1. The six-field encoding every event row written before the approver-identity migration was signed under. It stays byte-identical forever: historical rows have to keep verifying.

V2

chain_version = 2. Appends the account that performed this event’s operation — the approver on approval_granted, the executor on approval_consumed, the revoker on approval_revoked. Status events stay LegacyV1: they are written from spawned execution tasks with no caller attribution in scope, and signing an account the code cannot see would be a signed guess.

Fields

caller_principal: &'a str

Scheme-prefixed identity rendered by crate::auth::CallerPrincipal (uid:1000, token:vsock, none:unattributed). The scheme is signed along with the value for the same reason as on the transaction chain: the evidence classes differ in strength and an auditor must be able to tell them apart.

Implementations

impl EventIdentity<'_>

pub fn version(&self) -> u32

chain_version column value for this encoding.

Trait Implementations

impl<'a> Clone for EventIdentity<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for EventIdentity<'a>

impl<'a> Debug for EventIdentity<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Eq for EventIdentity<'a>

impl<'a> PartialEq for EventIdentity<'a>

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for EventIdentity<'a>