Struct ContextPolicy 

pub struct ContextPolicy {
    pub trusted_verifiers: Option<BTreeSet<String>>,
    pub presentable_types: Option<BTreeSet<String>>,
    pub signable_keys: Option<BTreeSet<String>>,
    pub export_allowed: bool,
    pub quotas: Option<Quotas>,
}

Per-context policy. See the module docs for the resolution model.

Fields

trusted_verifiers: Option<BTreeSet<String>>

Verifier DIDs an actor in this context may present to. None = any.

presentable_types: Option<BTreeSet<String>>

Credential types an actor may present. None = any.

signable_keys: Option<BTreeSet<String>>

Key ids the signing oracle may be invoked on. None = any.

export_allowed: bool

Whether sealed-transfer export is permitted. Defaults to true (unrestricted) when absent from the wire.

quotas: Option<Quotas>

Per-operation-class daily ceilings. None = no quota.

Implementations

impl ContextPolicy

pub fn unrestricted() -> Self

A policy that imposes no constraints — the implicit policy of any context without one, and the identity element for intersect.

pub fn intersect(&self, child: &ContextPolicy) -> ContextPolicy

Field-wise intersection of self (ancestor) with child. The result is at least as strict as both inputs; allow-list fields become the set intersection, export_allowed the logical AND, quotas the per-class minimum.

pub fn resolve<'a, I>(chain: I) -> ContextPolicy

where I: IntoIterator<Item = &'a ContextPolicy>,

Resolve the effective policy for a context from its ancestor chain, ordered root→leaf. An empty chain resolves to unrestricted.

pub fn allows_verifier(&self, verifier_did: &str) -> bool

Whether a credential may be presented to verifier_did.

pub fn allows_presentable_type(&self, credential_type: &str) -> bool

Whether a credential of credential_type may be presented.

pub fn allows_signing_key(&self, key_id: &str) -> bool

Whether the signing oracle may be invoked on key_id.

pub fn allows_export(&self) -> bool

Whether sealed-transfer export is permitted.

pub fn quota_for(&self, operation_class: &str) -> Option<u64>

The daily ceiling for operation_class, if any.

Trait Implementations

impl Clone for ContextPolicy

fn clone(&self) -> ContextPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContextPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ContextPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ContextPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ContextPolicy

impl PartialEq for ContextPolicy

fn eq(&self, other: &ContextPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ContextPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ContextPolicy