Struct RuntimeIdentity 

pub struct RuntimeIdentity {
    pub provider: Option<String>,
    pub model: Option<String>,
    pub tool_schema_hash: Option<String>,
    pub system_prompt_hash: Option<String>,
}

Who and what produced this action: the model runtime the actor was executing under at sign time. Binding it into the signed statement lets a verifier holding a pinned expectation (“this agent must run claude-opus-4-8 with this tool schema and this system prompt”) detect a swapped model, an altered tool set, or a changed system prompt after the fact. Where effect records what the action touched, this records what executed it.

Every field is optional and actor-attested: it is signed by the actor’s key, so it is exactly as trustworthy as the actor, and it carries no weight on its own. A verifier can only turn it into a Pass by reconciling it against an out-of-band pinned expectation; absent means “not recorded” (unverifiable), never a pass. The hashes are sha256:<hex> over the exact bytes presented to the model, so equality is the whole check.

Fields

provider: Option<String>

Model provider, e.g. “anthropic”, “openai”.

model: Option<String>

Model identifier the actor ran under, e.g. “claude-opus-4-8”.

tool_schema_hash: Option<String>

Hash of the exact tool schemas the agent had available this turn.

system_prompt_hash: Option<String>

Hash of the exact system prompt the agent ran under.

Implementations

impl RuntimeIdentity

pub fn is_unbound(&self) -> bool

True when no field is populated – the runtime binding attests nothing, so a verifier has nothing to pin against an expectation. Verify treats this the same as an absent runtime: the runtime layer is unverifiable, not a pass.

Trait Implementations

impl Clone for RuntimeIdentity

fn clone(&self) -> RuntimeIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuntimeIdentity

fn default() -> RuntimeIdentity

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RuntimeIdentity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RuntimeIdentity

impl PartialEq for RuntimeIdentity

fn eq(&self, other: &RuntimeIdentity) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RuntimeIdentity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RuntimeIdentity