Enum CustodyError 

pub enum CustodyError {
    UnknownCredential {
        credential: CredentialName,
    },
    KindMismatch {
        credential: CredentialName,
        kind: CredentialKind,
        operation: Operation,
    },
    OperationNotGranted {
        credential: CredentialName,
        operation: Operation,
    },
    ScopeRefused {
        credential: CredentialName,
        detail: String,
    },
    RungBelowFloor {
        required: Rung,
        actual: Rung,
    },
    Revoked {
        credential: CredentialName,
    },
    BudgetExhausted {
        credential: CredentialName,
    },
    EnvelopeRefused,
    EgressFailed {
        detail: String,
    },
    Backend {
        detail: String,
    },
}

Typed refusals. Refused reasons are closed so callers can route them; backend faults carry a message.

Variants

UnknownCredential

Fields

credential: CredentialName

KindMismatch

The declared kind does not support this operation, or the alg does not match the material.

Fields

credential: CredentialName

kind: CredentialKind

operation: Operation

OperationNotGranted

No grant covers this operation for this caller.

Fields

credential: CredentialName

operation: Operation

ScopeRefused

A narrowable operation’s grant list does not cover the target.

Fields

credential: CredentialName

detail: String

RungBelowFloor

The signed policy requires a rung the credential’s evidence does not reach.

Fields

required: Rung

actual: Rung

Revoked

Fields

credential: CredentialName

BudgetExhausted

Per-credential use budget exhausted (DR-0053 §9).

Fields

credential: CredentialName

EnvelopeRefused

AEAD refused the envelope: wrong context, wrong credential, or tampered ciphertext. Deliberately one variant — AEAD cannot say which.

EgressFailed

The egress or exchange failed at the network layer.

Fields

detail: String

Backend

Custodian-side fault.

Fields

detail: String

Trait Implementations

impl Clone for CustodyError

fn clone(&self) -> CustodyError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CustodyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CustodyError

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for CustodyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CustodyError

impl PartialEq for CustodyError

fn eq(&self, other: &CustodyError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CustodyError

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CustodyError