Enum CheckpointAudit 

pub enum CheckpointAudit {
    NoCheckpoints,
    Consistent {
        checkpoint_at: DateTime<Utc>,
        attested_entries: u64,
        unattested_entries: u64,
    },
    Truncated {
        attested: u64,
        found: u64,
    },
    HeadMismatch {
        head_event_id: Uuid,
        found: bool,
    },
}

How the audit log measured up against its newest signed checkpoint.

Variants

NoCheckpoints

No checkpoints exist. Nothing is contradicted, but nothing is attested either — the log carries only unkeyed-chain assurance.

Consistent

The log is consistent with the newest checkpoint.

Fields

checkpoint_at: DateTime<Utc>

attested_entries: u64

unattested_entries: u64

Chainable entries written since the checkpoint. These are covered by the hash chain but not by any signature — an adversary can still truncate this tail freely, so it is the residual exposure and worth surfacing.

Truncated

Truncation. The log holds fewer chainable entries than the newest signed checkpoint attests to. This is the finding the whole mechanism exists for and cannot be produced without the signing key.

Fields

attested: u64

found: u64

HeadMismatch

The envelope named by head_event_id is missing, or its entry_hash no longer matches the signed head. The attested anchor point has been removed or rewritten.

Fields

head_event_id: Uuid

found: bool

false when the envelope is absent entirely rather than altered.

Trait Implementations

impl Clone for CheckpointAudit

fn clone(&self) -> CheckpointAudit

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CheckpointAudit

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CheckpointAudit

impl PartialEq for CheckpointAudit

fn eq(&self, other: &CheckpointAudit) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CheckpointAudit