Struct FederationAttestation 

pub struct FederationAttestation {

    pub attestation_version: FederationAttestation_AttestationVersion,
    pub attestation_id: String,
    pub issuer_domain: TrustDomain,
    pub subject_domain: TrustDomain,
    pub subject_actor: Option<ActorId>,
    pub scope: Option<Vec<ActionName>>,
    pub trust_levels_granted: Option<Vec<TrustLevel>>,
    pub trust_bundle: Vec<FederationAttestation_TrustBundle_Item>,
    pub constraints: Option<Vec<Constraint>>,
    pub issued_at: Timestamp,
    pub valid_until: Timestamp,
    pub issuer: ActorId,
    pub signature: SignatureEnvelope,
}

Cross-trust-domain attestation: domain A signs a statement asserting that domain B’s identity (or a specific actor in B) is recognized within A’s trust fabric, optionally bounded by capability scope and time. Used by SPIFFE federated trust bundles, business-partner trust links, and sovereignty federations (TF-0002 “federated” identity mode).

Fields

attestation_version: FederationAttestation_AttestationVersion

Version of the federation-attestation schema.

attestation_id: String

Stable identifier for this attestation; used for revocation lookups.

issuer_domain: TrustDomain

Domain making the assertion.

subject_domain: TrustDomain

Domain being recognized.

subject_actor: Option<ActorId>

Optional specific actor inside subject_domain. When omitted the attestation covers the whole domain.

scope: Option<Vec<ActionName>>

Optional list of action names this attestation permits cross-domain. Empty means “recognize identity only” (no implicit authority).

trust_levels_granted: Option<Vec<TrustLevel>>

Maximum TrustLevel the issuer is willing to extend to subjects under this attestation.

trust_bundle: Vec<FederationAttestation_TrustBundle_Item>

SPIFFE-style trust bundle: the public keys / certificates of subject_domain that issuer_domain accepts. Each entry is either an X.509 PEM, a SPIFFE JWT-SVID JWK, or an opaque ed25519 public key.

constraints: Option<Vec<Constraint>>

Optional constraints attached to the federation grant (rate limits, target globs, time windows).

issued_at: Timestamp

valid_until: Timestamp

issuer: ActorId

Authority within issuer_domain that signed this attestation.

signature: SignatureEnvelope

Trait Implementations

impl Clone for FederationAttestation

fn clone(&self) -> FederationAttestation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FederationAttestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for FederationAttestation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FederationAttestation

impl PartialEq for FederationAttestation

fn eq(&self, other: &FederationAttestation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FederationAttestation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FederationAttestation