Enum Rung 

pub enum Rung {
    Process,
    OsKeyring,
    Hardware,
    Remote,
}

Sealing rung, ordered (DR-0053 §4). Derived from evidence by the custodian, never asserted in configuration — require credential <rung> in the signed policy compares against what the custodian derived (models/maude/credential-rung-evidence.maude: configuration is not evidence).

Variants

Process

r0: in-process, sealed at rest under a passphrase-derived key. whip’s language cannot read it; an escape can. Dev only, tagged degraded.

OsKeyring

r1: OS keyring (libsecret / Keychain / DPAPI). Survives file read; session-bound.

Hardware

r2: TPM 2.0 PCR-sealed / Secure Enclave / PKCS#11 — non-extractability is literally true.

Remote

r3: OpenBao / Vault / KMS / Home broker — material never exists on the box.

Implementations

impl Rung

pub fn as_str(&self) -> &'static str

pub fn parse(s: &str) -> Result<Self, String>

pub fn ladder_label(&self) -> &'static str

Short ladder label (r0…r3), for run records and diagnostics.

Trait Implementations

impl Clone for Rung

fn clone(&self) -> Rung

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Rung

impl Debug for Rung

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Rung

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Rung

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Rung

impl Hash for Rung

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Rung

fn cmp(&self, other: &Rung) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Rung

fn eq(&self, other: &Rung) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Rung

fn partial_cmp(&self, other: &Rung) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Rung

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Rung