Struct ChainVerifier 

pub struct ChainVerifier { /* private fields */ }

Incremental form of verify_chain, for callers that stream the audit log rather than materialising it.

A full audit log does not fit comfortably in memory on a busy community, and the verification is a strict left fold — each envelope needs only its predecessor’s entry_hash. Feeding envelopes in ascending write order through Self::push keeps memory constant regardless of log size.

The fold state is just (prev_hash, index), so verification can also be resumed across pages via Self::resume — pass the Self::head and Self::index returned by the previous page. A resumed verifier is only as trustworthy as the head it is given: resuming from a head an adversary supplied verifies nothing about the entries before it.

Implementations

impl ChainVerifier

pub fn new() -> Self

Start at the genesis anchor — the first v2+ envelope pushed must carry GENESIS_HASH as its prev_hash.

pub fn resume(head: [u8; 32], index: usize) -> Self

Resume from a previously-returned Self::head and Self::index, so a page of envelopes can be verified as a continuation of the page before it.

pub fn push(&mut self, env: &AuditEnvelope) -> Result<(), ChainBreak>

Verify one envelope as the successor of everything pushed so far. Envelopes must arrive in ascending write order.

On Err the verifier is left at the breaking entry and must not be reused — the chain past a break carries no meaning.

pub fn head(&self) -> Option<[u8; 32]>

entry_hash of the last verified v2+ envelope — the head of the chain so far. None if nothing chainable has been pushed.

pub fn index(&self) -> usize

Number of envelopes pushed, chainable or not. Pass to Self::resume so a continuation reports absolute indices.

pub fn verified(&self) -> usize

Count of v2+ envelopes that verified.

pub fn skipped_legacy(&self) -> usize

Count of pre-v2 envelopes skipped as unchainable.

Read this, don’t ignore it. Legacy rows are skipped rather than verified, so they are an insertion point: a forged envelope marked schema_version: 1 passes untouched. A store that should hold no legacy rows reporting a non-zero count here is itself the finding.

Trait Implementations

impl Clone for ChainVerifier

fn clone(&self) -> ChainVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ChainVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ChainVerifier

fn default() -> Self

Returns the “default value” for a type.