Enum HubCheckpointVerification 

pub enum HubCheckpointVerification {
    Valid,
    MissingFields(&'static str),
    Tampered,
    NotHubKind,
    UntrustedIssuer,
}

Outcome of verify_hub_checkpoint_signature.

Variants

Valid

Signature verified. The checkpoint was genuinely signed by hub_public_key. Coverage is the caller’s job to assert.

MissingFields(&'static str)

Checkpoint claims kind=HubOrg but is missing one of hub_id, hub_public_key, hub_signature, or signed_at. Verifiers MUST treat this the same as Tampered for the purpose of emitting replay-hub-org.

Tampered

Signature did not verify against the embedded public key. Tampered or wrong key.

NotHubKind

Checkpoint kind is LocalJournal – nothing to verify here. Caller should not have called this; surface as a programming error.

UntrustedIssuer

The embedded hub_public_key is not in the operator’s trust root store under kind Ship. The signature math may be internally consistent, but the issuer is unknown – self-signed forgeries land here. Distinct from Tampered so callers can render the actionable “configure trust” remediation.

Trait Implementations

impl Clone for HubCheckpointVerification

fn clone(&self) -> HubCheckpointVerification

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HubCheckpointVerification

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for HubCheckpointVerification

fn eq(&self, other: &HubCheckpointVerification) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for HubCheckpointVerification

impl StructuralPartialEq for HubCheckpointVerification