Struct TimelineAdmissionAcceptance 

pub struct TimelineAdmissionAcceptance {
    pub origin_sha256: Vec<u8>,
    pub uploader_device_public_key: Vec<u8>,
    pub deployment_public_key: Vec<u8>,
    pub request_sha256: Vec<u8>,
    pub first_position: u64,
    pub event_count: u32,
    pub signature: Vec<u8>,
    pub authority: Option<Authority>,
}

A current direct-human run-principal authority or a current format-3 OwnerAuthorizationBundle (owner_records.proto) with an ACCEPT_TIMELINE_ORIGIN grant signs this exact acceptance: UTF8(“heddle-timeline-run-acceptance-v1”) || 0x00 followed by fields 1..6 below, then one authority byte (1 for principal credential, 2 for owner capability) and counted(exact authority bytes). Byte fields use u32be(length)||bytes, uint64 fields use u64be, and event_count uses u32be. The signature and transport PoP are excluded. The original digest is SHA-256 of the origin transcript plus its 64-byte signature. The request digest is SHA-256 of: UTF8(“heddle-timeline-upload-v1”) || 0x00 || counted(client_operation_id) || counted(spool UUID) || counted(ThreadId.value) || counted(run ID) || u32be(canonicalization_version) || u64be(run_revision) || one byte snapshot presence || [u32be(state)||counted(harness) if present] || u32be(event count), then for each event in wire order: u64be(position)||u32be(kind)||i64be(recorded_at.seconds) ||u32be(recorded_at.nanos)||one byte tool presence || [u32be(tool) if present] || counted(origin SHA-256) || u64be(first_position). counted means u32be(byte_length)||exact bytes; presence is 0 or 1. The acceptance, its authority selector and transport PoP are excluded. Unknown fields are invalid. This layout is independent of protobuf serialization. An acceptance is valid only for this exact digest and position range. For principal_credential_id, Weft resolves the exact ID in its current credential registry, verifies a live independent root or server-issued direct-human session/pairing chain, and uses that chain’s final effective Ed25519 PoP key for this signature. Its account MUST be the origin’s verified principal. Agent labels, account claims and uploader credentials do not confer acceptance permission. For owner_derived_capability, the bytes are a protobuf wire encoding of OwnerAuthorizationBundle, at most 4096 bytes. Decode the complete bundle, rejecting unknown fields and trailing bytes. Verify its owner root and transition history against the independently pinned CURRENT owner state of the run-principal account; OwnerRoot.account_uuid MUST equal the verified principal UUID (never accept a state supplied only by this bundle). Then verify the single format-3 capability and subject Biscuit. The grant’s exact Spool selector, Thread ID, original principal UUID, credential class, original credential identity variant and values, effective key digest and signed origin SHA-256 MUST equal the verified origin. The leaf CapabilityPrincipal.key is the effective Ed25519 signing key for this acceptance. SignedOwnerCapability.signature signer_key_id instead resolves to the owner issuer key through the accepted owner transition at issuer_state_hash and its live rotation/recovery signing window; reject an obsolete, vetoed or uncommitted issuer state. The subject signs this acceptance transcript with its effective key, not the owner key or the uploader key. Recheck capability validity interval, direct-only/single-block attenuation restriction, active owner transitions/recovery windows, every credential and capability revocation, and the subject proof at the admission transaction. No v1 PURGE grant, generic grant envelope, passkey certificate alone, or owner/admin status authorizes acceptance. The acceptance bytes do not replace the uploader’s independent Tier-1 transport proof.

Fields

origin_sha256: Vec<u8>

Exactly 32 bytes.

uploader_device_public_key: Vec<u8>

Exactly 32 bytes.

deployment_public_key: Vec<u8>

Exactly 32 bytes.

request_sha256: Vec<u8>

Exactly 32 bytes.

first_position: u64

0..2^63-1.

event_count: u32

0..64.

signature: Vec<u8>

Ed25519, exactly 64 bytes.

authority: Option<Authority>

Exactly one current authority route; credential IDs are 1..128 bytes and owner-derived capability bundles are at most 4096 bytes.

Trait Implementations

impl Clone for TimelineAdmissionAcceptance

fn clone(&self) -> TimelineAdmissionAcceptance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TimelineAdmissionAcceptance

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TimelineAdmissionAcceptance

fn default() -> TimelineAdmissionAcceptance

Returns the “default value” for a type.

impl Eq for TimelineAdmissionAcceptance

impl Hash for TimelineAdmissionAcceptance

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for TimelineAdmissionAcceptance

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for TimelineAdmissionAcceptance

fn eq(&self, other: &TimelineAdmissionAcceptance) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TimelineAdmissionAcceptance