Enum PluginTrustTier 

pub enum PluginTrustTier {
    Signed,
    Unsigned,
}

Trust classification assigned to a wasm component at load time.

Variants

Signed

Component is signed by a trusted key (cosign / sigil).

May import raw transport (transport.tcp, transport.tls) and the secrets interface. All safe-tier primitives also available.

Unsigned

Component is unsigned (customer wasm or unsigned local plugin).

May only import the safe high-level primitives: http, persistence, pubsub, file, clock, crypto, process, quota. Attempting to link against privileged primitives traps at instantiation.

Implementations

impl PluginTrustTier

pub const fn is_privileged(&self) -> bool

Whether this tier may access raw TCP/TLS transport or the secrets interface.

pub fn resolve(is_signed: bool, environment: &str) -> Self

Determine the effective trust tier for a component given the environment and whether a valid signature was found.

In development mode the signing check is bypassed — unsigned plugins load and receive Signed privileges so local development doesn’t require a full cosign pipeline.

Trait Implementations

impl Clone for PluginTrustTier

fn clone(&self) -> PluginTrustTier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PluginTrustTier

impl Debug for PluginTrustTier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PluginTrustTier

fn default() -> PluginTrustTier

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PluginTrustTier

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for PluginTrustTier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PluginTrustTier

impl Hash for PluginTrustTier

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PluginTrustTier

fn eq(&self, other: &PluginTrustTier) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PluginTrustTier

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PluginTrustTier