Struct TrustedKey 

pub struct TrustedKey {
    pub kid: String,
    pub alg: SigAlg,
    pub key_material: String,
}

A public key trusted to sign peer AgentCards, keyed by kid.

This is the trust anchor for card signature verification: the operator configures one entry per peer agent whose signature should be honored. There is no automatic key discovery (see the module docs for why jku fetch is deferred).

key_material accepts either a JWK JSON object ({"kty":"EC","crv":"P-256","x":...,"y":...}) or a PEM-encoded SubjectPublicKeyInfo. Parsing happens lazily on each verification attempt — verification is not on a hot path (AgentRegistry::discover has no runtime caller yet, see D3), so caching the parsed key is not worth the complexity.

Fields

kid: String

Key identifier, matched against the kid in a signature’s protected header.

alg: SigAlg

Algorithm this key is trusted to verify.

key_material: String

JWK JSON or PEM-encoded public key material.

Trait Implementations

impl Clone for TrustedKey

fn clone(&self) -> TrustedKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustedKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.