List of all items
Structs
- actor_id::ParsedActorId
- approval::ApprovalQueue
- approval::ApprovalResult
- binary_format::TfbundleParts
- bridge_a2a::A2AAgentCard
- bridge_a2a::A2ABridge
- bridge_a2a::A2ABridgeConfig
- bridge_a2a::A2ACapability
- bridge_a2a::ProjectedActor
- bridge_did::DidBridge
- bridge_did::DidBridgeConfig
- bridge_did::DidDocument
- bridge_did::DidVerificationMethod
- bridge_gnap::DpopProofVerification
- bridge_gnap::GnapAccessTokenRequest
- bridge_gnap::GnapAccessTokenResponse
- bridge_gnap::GnapBridge
- bridge_gnap::GnapBridgeConfig
- bridge_gnap::GnapClient
- bridge_gnap::GnapGrantRequest
- bridge_gnap::GnapGrantResponse
- bridge_gnap::GnapKeyDescriptor
- bridge_gnap::GnapVerifiedGrant
- bridge_grpc::GrpcBridge
- bridge_grpc::GrpcBridgeConfig
- bridge_grpc::GrpcCallContext
- bridge_grpc::GrpcReply
- bridge_matrix::MatrixBridge
- bridge_matrix::MatrixBridgeConfig
- bridge_matrix::MatrixEvent
- bridge_mcp::McpAction
- bridge_mcp::McpBridge
- bridge_mcp::McpBridgeConfig
- bridge_mcp::McpImportOptions
- bridge_mcp::McpTool
- bridge_mcp::McpToolList
- bridge_oauth::Jwk
- bridge_oauth::Jwks
- bridge_oauth::OAuthBridge
- bridge_oauth::OAuthBridgeConfig
- bridge_oauth::OAuthClaims
- bridge_oauth::OAuthVerificationResult
- bridge_service_mesh::IstioPrincipal
- bridge_service_mesh::LinkerdClient
- bridge_service_mesh::ProofEventStub
- bridge_service_mesh::ServiceMeshBridge
- bridge_service_mesh::ServiceMeshBridgeConfig
- bridge_service_mesh::XfccEntry
- bridge_spiffe::ParsedSpiffeId
- bridge_spiffe::SpiffeBridge
- bridge_tls::CrlCheck
- bridge_tls::CrlIndex
- bridge_tls::ExporterBinding
- bridge_tls::OcspCheck
- bridge_tls::PostHandshakeReauth
- bridge_tls::RevocationEntry
- bridge_tls::TlsBridge
- bridge_tls::TlsBridgeConfig
- bridge_tls::TlsVerificationResult
- bridge_tls::X509Cert
- bridge_tls::ocsp::BasicResponseData
- bridge_tls::ocsp::OcspResponse
- bridge_tls::ocsp::SingleResponse
- bridge_webauthn::WebAuthnBridge
- bridge_webauthn::WebAuthnBridgeConfig
- bridge_webauthn::WebAuthnCredential
- bridge_webhook::VerifyWebhookArgs
- bridge_webhook::WebhookBridge
- bridge_webhook::WebhookBridgeConfig
- bridge_webhook::WebhookVerificationResult
- bridges::BridgeRegistry
- bridges_registry::BridgeEntry
- bridges_registry::BridgesRegistry
- bundle::BundleRecipient
- bundle::EncryptedProofBundle
- bundle::MemoryAnchor
- bundle::SignatureEnvelope
- bundle::WrappedKey
- capability::EvalContext
- constrained::DeliveryReceipt
- constrained::OfflineRevocationListRuntime
- constrained::OrlMetadata
- constrained::PacketReceiver
- constrained::ProofOfForwarding
- constrained::ReceiptSignature
- constrained::VerifyResult
- crypto::Ed25519Signer
- crypto::X25519KeyPair
- delegation::WalkResult
- encoding::Engine
- envelope::EnvelopeValidation
- evidence::AssembleArgs
- evidence::AssembleResult
- evidence::EvidenceAnchor
- evidence::EvidenceBundle
- evidence::EvidenceIncident
- evidence::SignatureEnvelope
- evidence::VerifyResult
- expiration::Window
- federation::FederatedTrustStore
- federation::FederationAttestation
- federation::ForeignIdentityCheck
- federation::SignAttestationArgs
- federation::SignatureEnvelope
- federation::TrustBundleEntry
- federation::VerifyAttestationResult
- format::TfproofParts
- generated::actions::ActionDef
- generated::actions::Actions
- generated::actor_identity::ActorIdentity
- generated::actor_identity::AuthorityRoot
- generated::actor_identity::PublicKey
- generated::agent_contract::Action
- generated::agent_contract::AgentContract
- generated::agent_contract::AgentContract_Conformance
- generated::agent_contract::AgentContract_Integrations
- generated::agent_contract::AgentContract_References
- generated::agent_contract::Forbidden
- generated::approval_ceremony::ApprovalCeremony
- generated::approval_request::ApprovalRequest
- generated::approval_response::ApprovalResponse
- generated::bridge_descriptor::BridgeDescriptor
- generated::bridges_registry::BridgeEntry
- generated::bridges_registry::BridgesRegistry
- generated::capability_token::CapabilityToken
- generated::common::Capability
- generated::common::DelegationLink
- generated::common::DelegationLink_Redelegation
- generated::common::NegativeCapability
- generated::common::SignatureEnvelope
- generated::conformance::Conformance
- generated::conformance_vector::ConformanceVector
- generated::daemon_config::DaemonConfig
- generated::daemon_config::DaemonConfig_Admin
- generated::daemon_config::DaemonConfig_ApprovalQueue
- generated::daemon_config::DaemonConfig_Http
- generated::daemon_config::DaemonConfig_Listen
- generated::daemon_config::DaemonConfig_Vault
- generated::dangerous_actions::CatalogEntry
- generated::dangerous_actions::DangerousActions
- generated::evidence_bundle::EvidenceBundle
- generated::evidence_bundle::EvidenceBundle_Anchors_Item
- generated::evidence_bundle::EvidenceBundle_Incident
- generated::evidence_bundle::EvidenceBundle_QuorumOutcomes_Item
- generated::federation_attestation::FederationAttestation
- generated::federation_attestation::FederationAttestation_TrustBundle_Item
- generated::offline_revocation_list::OfflineRevocationList
- generated::offline_revocation_list::RevokedEntry
- generated::packet::Packet
- generated::packet_bundle::PacketBundle
- generated::packet_fragment::PacketFragment
- generated::permission_grant::PermissionGrant
- generated::permission_request::PermissionRequest
- generated::plugin_manifest::PluginManifest
- generated::policy::Policy
- generated::policy::Policy_ContinuousReevaluation
- generated::policy::Policy_QuorumDefaults
- generated::policy::Rule
- generated::policy_decision::PolicyDecision
- generated::profile_spec::Feature
- generated::profile_spec::ProfileSpec
- generated::proof_bundle::ProofBundle
- generated::proof_bundle::ProofBundle_TransparencyAnchor
- generated::proof_bundle_encrypted::ProofBundleEncrypted
- generated::proof_bundle_encrypted::WrappedKey
- generated::proof_event::ProofEvent
- generated::proof_event::ProofEvent_Provenance
- generated::proof_profile::EmitRule
- generated::proof_profile::ProofProfile
- generated::proof_profile::RedactionRule
- generated::proofrpc::Method
- generated::proofrpc::Proofrpc
- generated::relay_authority::RelayAuthority
- generated::revocation::Revocation
- generated::session_migration::SessionMigration
- generated::threat_model::Adversary
- generated::threat_model::Asset
- generated::threat_model::Mitigation
- generated::threat_model::ResidualRisk
- generated::threat_model::ThreatModel
- generated::transport_binding::TransportBinding
- generated::vault_file::VaultEntry
- generated::vault_file::VaultFile
- generated::vault_file::VaultFile_Cipher
- generated::vault_file::VaultFile_Kdf
- guard::AgentGuard
- guard::GuardEventStub
- guard::GuardQuery
- guard::IndexedAction
- guard::NegativeCapability
- instance_id::ParsedInstanceId
- jws::Header
- jws::TokenData
- jws::Validation
- offline_approval::ApprovalResponse
- offline_approval::OfflineApprovalCeremony
- offline_approval::OfflineApprovalPacket
- offline_approval::SignatureEnvelope
- offline_approval::VerifyOfflineApprovalResult
- packet::FragmentOptions
- packet::LoraSimOptions
- packet::LoraSimResult
- packet::Packet
- packet::PacketFragmentHeader
- packet::PacketSignatureEnvelope
- packet::ReassembleResult
- packet::SignPacketArgs
- packet::VerifyPacketResult
- permission::PermissionGrant
- permission::PermissionRequest
- permission::Provenance
- permission::SignatureEnvelope
- permission::VerifyPermissionGrantResult
- plugin::LoadedPlugin
- plugin::PluginRegistry
- plugin_wasm::CapabilityArgs
- plugin_wasm::WasmPlugin
- plugin_wasm::WasmPluginRuntimeOptions
- policy_engine::ContinuousReeval
- policy_engine::NativePolicyEngine
- policy_engine::PolicyDecision
- policy_engine::PolicyManifest
- policy_engine::PolicyQuery
- policy_engine::PolicyRule
- policy_engine::QuorumDefaults
- profile::ProfileFeatureGate
- profile::ProfileVerdict
- quorum::QuorumApprovalCollector
- quorum::QuorumCeremony
- quorum::QuorumConfig
- quorum::QuorumHandle
- quorum::QuorumOutcome
- quorum::QuorumSignature
- relay::RelayAuthority
- relay::RelayForwardedEvent
- relay::RelayFrame
- relay::RelayHandler
- relay::SignatureEnvelope
- relay::VerifyRelayAuthorityResult
- revocation::RevocationIndex
- rpc::AgentSessionFrame
- rpc::AllowAllEnforcer
- rpc::DenyAllEnforcer
- rpc::RemoteShellOut
- rpc::RpcBulkExt
- rpc::RpcCallError
- rpc::RpcClient
- rpc::RpcContext
- rpc::RpcError
- rpc::RpcFrameExt
- rpc::RpcProofEventStub
- rpc::RpcServer
- session::Auth
- session::HelloI
- session::HelloR
- session::Initiator
- session::Responder
- session::SessionConfig
- session::SessionState
- session_migration::Ratchet
- session_migration::SessionMigration
- session_migration::SignatureEnvelope
- session_migration::TransportBinding
- session_migration::VerifyMigrationResult
- simulation::ScenarioResult
- tf_manifests::TfDiagnostic
- tf_manifests::TfFeatureGate
- tf_manifests::TfManifestPaths
- tf_manifests::TfManifests
- trust_domain::ParsedTrustDomain
- trust_overlay::PostureContext
- trust_overlay::TrustOverlayResult
- vault::Vault
- vault::VaultCreateOptions
- vault::VaultEntryPlain
- vault::VaultEntrySummary
- webauthn_attestation::AttestationObject
- webauthn_attestation::ClientData
- webauthn_attestation::CosePublicKey
- webauthn_attestation::ParsedAuthData
- webauthn_attestation::VerifiedAttestation
- webauthn_attestation::VerifyAttestationOptions
- yaml::YamlError
Enums
- actor_id::ActorIdParseError
- approval::ApprovalDecision
- approval::ApprovalError
- binary_format::BinaryFormatError
- bridge_gnap::GnapAccessRight
- bridge_tls::CrlError
- bridge_tls::OcspError
- bridge_tls::OcspStatus
- bridge_webhook::WebhookScheme
- bridges::BridgeError
- bridges::BridgeKind
- bridges_registry::BridgesRegistryError
- bridges_registry::BridgesRegistryKind
- canonical::CanonicalJsonError
- cbor::CborError
- cbor::Value
- chain::ChainError
- constrained::OrlError
- constrained::PacketReceiverDecision
- constrained::PacketRejectReason
- crypto::AeadError
- crypto::CryptoError
- encoding::DecodeError
- envelope::EnvelopeIssue
- expiration::ExpirationVerdict
- format::FormatError
- generated::actions::Actions_ActionsLibraryVersion
- generated::actor_identity::ActorIdentity_IdentityVersion
- generated::actor_identity::AuthorityRoot_Kind
- generated::actor_identity::PublicKey_Purpose
- generated::agent_contract::AgentContract_ContractVersion
- generated::approval_ceremony::ApprovalCeremony_CeremonyVersion
- generated::approval_ceremony::ApprovalCeremony_Kind
- generated::approval_ceremony::ApprovalCeremony_Modality
- generated::approval_ceremony::ApprovalCeremony_TransportHint
- generated::approval_request::ApprovalRequest_RequestVersion
- generated::approval_response::ApprovalResponse_Decision
- generated::approval_response::ApprovalResponse_ResponseVersion
- generated::bridge_descriptor::BridgeDescriptor_BridgeVersion
- generated::bridge_descriptor::BridgeDescriptor_Kind
- generated::bridges_registry::BridgeEntry_Kind
- generated::bridges_registry::BridgesRegistry_RegistryVersion
- generated::capability_token::CapabilityToken_TokenVersion
- generated::common::ActorType
- generated::common::ApprovalRequirement
- generated::common::Constraint
- generated::common::DangerTag
- generated::common::EnforcementLevel
- generated::common::ProofLevel
- generated::common::RiskClass
- generated::common::TrustLevel
- generated::conformance::Conformance_ConformanceVersion
- generated::conformance_vector::ConformanceVector_Category
- generated::conformance_vector::ConformanceVector_Expect
- generated::conformance_vector::ConformanceVector_VectorVersion
- generated::daemon_config::DaemonConfig_DaemonVersion
- generated::dangerous_actions::DangerousActions_DangerousActionsVersion
- generated::evidence_bundle::EvidenceBundle_EvidenceVersion
- generated::evidence_bundle::EvidenceBundle_Level
- generated::federation_attestation::FederationAttestation_AttestationVersion
- generated::offline_revocation_list::OfflineRevocationList_ListVersion
- generated::offline_revocation_list::RevokedEntry_Kind
- generated::packet::Packet_Compression
- generated::packet::Packet_Encoding
- generated::packet::Packet_PacketVersion
- generated::packet::Packet_Priority
- generated::packet_bundle::PacketBundle_BundleVersion
- generated::packet_bundle::PacketBundle_TransportHint
- generated::permission_grant::PermissionGrant_Decision
- generated::permission_grant::PermissionGrant_GrantVersion
- generated::permission_request::PermissionRequest_RequestVersion
- generated::plugin_manifest::PluginManifest_Kind
- generated::plugin_manifest::PluginManifest_PluginVersion
- generated::policy::Policy_EngineHint
- generated::policy::Policy_PolicyVersion
- generated::policy::Rule_Effect
- generated::policy_decision::PolicyDecision_Decision
- generated::policy_decision::PolicyDecision_DecisionVersion
- generated::policy_decision::PolicyDecision_PolicyEngine
- generated::profile_spec::ProfileSpec_MinEnforcementLevel
- generated::profile_spec::ProfileSpec_ProfileVersion
- generated::profile_spec::ProfileSpec_RequiredAnchors_Item
- generated::proof_bundle::ProofBundle_BundleVersion
- generated::proof_bundle_encrypted::ProofBundleEncrypted_BundleVersion
- generated::proof_bundle_encrypted::ProofBundleEncrypted_Level
- generated::proof_event::ProofEvent_EventVersion
- generated::proof_profile::EmitRule_Anchor
- generated::proof_profile::ProofProfile_ProfileVersion
- generated::proof_profile::RedactionRule_Policy
- generated::proofrpc::Method_Kind
- generated::proofrpc::Method_StreamingPriority
- generated::proofrpc::Proofrpc_RpcVersion
- generated::relay_authority::RelayAuthority_Kinds_Item
- generated::relay_authority::RelayAuthority_RelayAuthorityVersion
- generated::revocation::Revocation_RevocationVersion
- generated::revocation::Revocation_TargetKind
- generated::session_migration::SessionMigration_MigrationVersion
- generated::threat_model::Adversary_CapabilityLevels_Item
- generated::threat_model::Mitigation_Status
- generated::threat_model::ThreatModel_ThreatModelVersion
- generated::transport_binding::TransportBinding_BindingVersion
- generated::transport_binding::TransportBinding_Kind
- generated::vault_file::VaultEntry_Purpose
- generated::vault_file::VaultFile_VaultVersion
- guard::EnforcementLevel
- guard::GuardDecision
- jws::Algorithm
- jws::DecodingKey
- jws::EncodingKey
- jws::JwsError
- plugin::PluginError
- relay::RelayPolicyError
- rpc::CapabilityDecision
- rpc::HttpFrame
- rpc::RemoteShellStream
- rpc::ResponseStatus
- rpc::RpcErrorCode
- rpc::RpcFrame
- rpc::RpcMethodKind
- rpc::StreamingPriority
- session::Role
- session::SessionError
- session::SessionFrame
- simulation::ScenarioName
- store::StoreError
- trust_domain::TrustDomainKind
- trust_domain::TrustDomainParseError
- vault::VaultError
- webauthn_attestation::AttestationFormat
- webauthn_attestation::CoseAlgorithm
Traits
- bridge_grpc::GrpcChannel
- bridge_tls::OcspFetcher
- bridges::Bridge
- bundle::AnchorBackend
- policy_engine::PolicyEngineImpl
- rpc::CapabilityEnforcer
- rpc::RpcTransport
- store::EvidenceArchive
- store::ProofLedger
- store::RevocationCache
Functions
- actor_id::actor_id_equals
- actor_id::derive_peer_actor
- actor_id::format_actor_id
- actor_id::parse_actor_id
- binary_format::read_tfbundle
- binary_format::read_tfbundle_typed
- binary_format::read_tfpkt
- binary_format::write_tfbundle
- binary_format::write_tfpkt
- bridge_a2a::a2a_normalise_capability
- bridge_did::ed25519_public_key_to_did_key
- bridge_gnap::jwk_thumbprint
- bridge_matrix::map_sender
- bridge_mcp::contract_to_mcp_tools
- bridge_mcp::mcp_to_contract_actions
- bridge_oauth::parse_algorithm
- bridge_oauth::project_jwk_to_public_key
- bridge_service_mesh::envoy_accepted_event
- bridge_service_mesh::istio_accepted_event
- bridge_service_mesh::linkerd_accepted_event
- bridge_service_mesh::parse_istio_attributes
- bridge_service_mesh::parse_linkerd_client_id
- bridge_service_mesh::parse_xfcc
- bridge_spiffe::actor_id_to_spiffe
- bridge_spiffe::parse_spiffe_id
- bridge_spiffe::spiffe_to_actor_id
- bridge_tls::default_eku_to_action
- bridge_tls::ocsp::parse_ocsp_response
- bundle::build_rfc3161_request
- bundle::encrypted_signing_bytes
- bundle::open_bundle
- bundle::seal_bundle
- canonical::canonicalize
- canonical::canonicalize_map
- capability::constraints_satisfied
- capability::intersect_constraints
- cbor::decode
- cbor::encode
- cbor::from_json
- cbor::to_json
- chain::canonical_of
- chain::chain_hash
- chain::event_hash
- chain::event_signed_payload
- chain::merkle_root
- chain::verify_chain
- constrained::sign_delivery_receipt
- constrained::sign_offline_revocation_list
- constrained::sign_proof_of_forwarding
- constrained::verify_delivery_receipt
- constrained::verify_offline_revocation_list_signature
- constrained::verify_proof_of_forwarding
- crypto::b64decode
- crypto::b64encode
- crypto::blake3_hashref
- crypto::chacha20poly1305_decrypt
- crypto::chacha20poly1305_encrypt
- crypto::ed25519_verify
- crypto::hex
- crypto::hkdf_sha256
- crypto::parse_hashref
- crypto::sha256_hashref
- crypto::x25519_diffie_hellman
- crypto::x25519_from_bytes
- crypto::x25519_generate
- crypto_pq::ml_dsa_65_generate
- crypto_pq::ml_dsa_65_sign
- crypto_pq::ml_dsa_65_verify
- delegation::walk_chain
- envelope::validate_envelope_shape
- evidence::assemble_evidence_bundle
- evidence::evidence_signing_bytes
- evidence::verify_evidence_bundle
- expiration::check_window
- expiration::is_expired
- expiration::is_within_window
- federation::attestation_signing_bytes
- federation::sign_federation_attestation
- federation::verify_federation_attestation
- format::append_tflog
- format::read_tflog
- format::read_tfproof
- format::write_tflog
- format::write_tfproof
- glob::glob_match
- guard::apply_enforcement_level
- instance_id::format_instance_id
- instance_id::parse_instance_id
- instance_id::to_actor_id
- jws::decode
- jws::decode_header
- jws::encode
- offline_approval::sign_offline_approval_packet
- offline_approval::verify_offline_approval_packet
- packet::fragment_packet
- packet::packet_signing_bytes
- packet::reassemble_fragments
- packet::sign_packet
- packet::simulate_lora
- packet::verify_packet
- permission::permission_grant_signing_bytes
- permission::provenance_from_request
- permission::sign_permission_grant
- permission::verify_permission_grant
- plugin::verify_plugin_signature
- policy_engine::evaluate_with_engine
- profile::builtin_profile
- profile::builtin_profiles
- profile::select_profile
- relay::relay_authority_signing_bytes
- relay::sign_relay_authority
- relay::verify_relay_authority
- rpc::new_call_id
- session_migration::migrate_session
- session_migration::migration_signing_bytes
- session_migration::verify_session_migration
- simulation::as_shadow_decision
- simulation::run_all_scenarios
- simulation::run_scenario
- tf_manifests::build_feature_gate
- tf_manifests::load_tf_manifests
- trust_domain::parse_trust_domain
- trust_domain::trust_domain_equals
- trust_overlay::compose_trust_level
- webauthn_attestation::decode_attestation_object
- webauthn_attestation::parse_authenticator_data
- webauthn_attestation::parse_client_data
- webauthn_attestation::parse_cose_public_key
- webauthn_attestation::verify_attestation
- yaml::from_str
- yaml::parse
- yaml::to_string
Type Aliases
- generated::common::ActionName
- generated::common::ActorId
- generated::common::AlgorithmId
- generated::common::HashRef
- generated::common::InstanceId
- generated::common::Timestamp
- generated::common::TrustDomain
- plugin::NativeHandler
- plugin_wasm::CapabilityCheck
- rpc::AgentSessionHandler
- rpc::BidiHandler
- rpc::BulkTransferHandler
- rpc::ClientStreamHandler
- rpc::CommandChannelHandler
- rpc::HttpBridgeHandler
- rpc::RemoteShellHandler
- rpc::StreamHandler
- rpc::SubscribeHandler
- rpc::TelemetryHandler
- rpc::UnaryHandler
Constants
- actor_id::ACTOR_TYPE_STRS
- binary_format::TFBUNDLE_MAGIC
- binary_format::TFPKT_MAGIC
- encoding::STANDARD
- encoding::URL_SAFE_NO_PAD
- format::TFLOG_MAGIC
- format::TFPROOF_MAGIC
- session::KNOWN_SESSION_SUITES
- session::SESSION_SUITE
- session::SESSION_SUITE_HYBRID_ED25519_MLDSA65
- session::SESSION_VERSION
- simulation::ALL_SCENARIOS