Struct SessionLivenessStatement 

pub struct SessionLivenessStatement {
    pub type_: String,
    pub session_ref: String,
    pub participant_ref: String,
    pub joining_agent: String,
    pub nonce_digest: String,
    pub challenge_issued_at: String,
    pub response_signed_at: String,
}

Host-signed evidence that a specific join answered a specific challenge, with both endpoints of the window it took.

Fields

type_: String

session_ref: String

session_id the join belongs to. Must equal the participant statement’s session_ref; a verifier checks this rather than trusting the link.

participant_ref: String

Artifact id of the participant envelope this attests. The link that makes the evidence portable: given a participant receipt, a verifier can find the liveness statement, and given this, they can find what it describes.

joining_agent: String

Joining agent’s Ed25519 public key, base64url-no-pad. Duplicated from the participant statement deliberately: it is bound into these signed bytes, so this attestation cannot be re-pointed at a different join by editing the reference alone.

nonce_digest: String

sha256:<hex> of the nonce, never the nonce itself. The nonce is single-use liveness material; publishing it in a durable artifact would hand a replayer the exact string the host was expecting. A digest still lets the host’s own records be reconciled against this.

challenge_issued_at: String

RFC 3339. When the host minted the nonce.

response_signed_at: String

RFC 3339. The signed_at the joining agent bound into its challenge response — the agent’s own claim about when it answered.

Implementations

impl SessionLivenessStatement

pub fn new( session_ref: impl Into<String>, participant_ref: impl Into<String>, joining_agent: impl Into<String>, nonce: &str, challenge_issued_at: impl Into<String>, response_signed_at: impl Into<String>, ) -> Self

pub fn interval_seconds(&self) -> Option<i64>

The challenge window in seconds: issue to answer.

None when either timestamp will not parse, or when the answer predates the challenge. A negative interval is not a small window — it means at least one clock is wrong or one timestamp was fabricated, and reporting it as a number would launder that into a reassuring value. The caller must handle None as “cannot be evaluated”.

pub fn canonical_for_signing(&self) -> String

Canonical signing bytes. Same pipe-delimited shape as the other session statements, every field positional so none can be omitted.

pub fn sign_as_host( &self, host_signer: &dyn Signer, ) -> Result<String, SignerError>

Signed by the host, not the joining agent. The host is the party that issued the challenge and observed the answer; the agent cannot attest to when it was asked.

Trait Implementations

impl Clone for SessionLivenessStatement

fn clone(&self) -> SessionLivenessStatement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionLivenessStatement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionLivenessStatement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SessionLivenessStatement

impl PartialEq for SessionLivenessStatement

fn eq(&self, other: &SessionLivenessStatement) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SessionLivenessStatement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SessionLivenessStatement