Enum TrustRootKind 

pub enum TrustRootKind {
    HubCheckpoint,
    Ship,
    AgentCert,
    SessionHost,
}

What this trust root is allowed to verify. Encoded kebab-case in JSON because the rest of the codebase (CheckpointKind, etc.) does the same.

Adding a variant is a wire-format event: every JSON consumer that matches exhaustively on this enum must add the new arm in the same release. Phase 1 of the agent-invitations spec adds SessionHost for invitation issuer pinning; that addition is called out as a breaking change in the CHANGELOG for the same release.

Variants

HubCheckpoint

Merkle Checkpoint produced by treeship merkle checkpoint. This is the ship-local journal checkpoint, distinct from the hub-org JournalCheckpoint kind below.

Ship

JournalCheckpoint of kind hub-org – signed by a remote Hub to promote a local journal claim to a global single-use claim.

AgentCert

AgentCertificate issued by a ship to one of its agents.

SessionHost

Phase 1 of agent invitations: the host’s signing key that mints InvitationStatement envelopes. Verifiers (and the treeship session join flow) require the invitation’s issuer pubkey to be present in the trust root store under this kind before honoring the invitation. Separate from Ship so a machine can trust hub-org checkpoints without implicitly trusting that hub to host multi-agent rooms.

Implementations

impl TrustRootKind

pub fn as_str(self) -> &'static str

pub fn parse(s: &str) -> Option<Self>

Trait Implementations

impl Clone for TrustRootKind

fn clone(&self) -> TrustRootKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustRootKind

impl Debug for TrustRootKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustRootKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TrustRootKind

impl Hash for TrustRootKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TrustRootKind

fn eq(&self, other: &TrustRootKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TrustRootKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TrustRootKind