Struct SignatifManifest 

pub struct SignatifManifest {
    pub manifest_version: u32,
    pub topology: TopologyProfile,
    pub authorities: Vec<AuthorityDeclaration>,
    pub algorithms: Vec<String>,
    pub migration_phase: MigrationPhase,
    pub transparency_logs: Vec<LogDeclaration>,
    pub multi_log_policy: Option<MultiLogPolicyDeclaration>,
    pub cross_recognitions: Vec<CrossRecognition>,
    pub valid_from: DateTime<Utc>,
    pub valid_until: DateTime<Utc>,
    pub root_signature: Vec<u8>,
}

A root-signed declarative deployment manifest (§18).

Fields

manifest_version: u32

Manifest version (semantic compatibility).

topology: TopologyProfile

The deployment’s topology profile.

authorities: Vec<AuthorityDeclaration>

All declared trust authorities (roots have empty parents).

algorithms: Vec<String>

Algorithms recognized by this deployment (algorithm registry names).

migration_phase: MigrationPhase

The active migration phase.

transparency_logs: Vec<LogDeclaration>

Recognized transparency logs and mirrors.

multi_log_policy: Option<MultiLogPolicyDeclaration>

Multi-log attestation policy, when applicable.

cross_recognitions: Vec<CrossRecognition>

Cross-recognition credentials between roots.

valid_from: DateTime<Utc>

Manifest validity.

valid_until: DateTime<Utc>

Manifest validity.

root_signature: Vec<u8>

The root trust authority’s signature over the canonical manifest body.

Implementations

impl SignatifManifest

pub fn signing_bytes(&self) -> SignatifResult<Vec<u8>>

Canonical signing bytes (JCS of the manifest with the signature cleared).

Errors

Propagates canonicalization errors.

pub fn authority(&self, id: &str) -> Option<&AuthorityDeclaration>

Look up an authority declaration.

pub fn roots(&self) -> Vec<&AuthorityDeclaration>

The root authorities (no parents).

pub fn verify_signature( &self, verifier: &dyn SignatureVerifier, ) -> SignatifResult<()>

Verify the root signature of the manifest.

Errors

Signature or root-key resolution errors.

pub fn validate(&self) -> SignatifResult<()>

Validate the whole manifest (§18 manifest-validation-*):

1. acyclic delegation graph;
2. monotonic scope narrowing on every parent -> child link;
3. quorum consistency (1 <= T <= N per authority, M <= K for the multi-log policy);
4. at least one root exists.

Errors

Returns the first violation as an encoding error with a precise message.

Trait Implementations

impl Clone for SignatifManifest

fn clone(&self) -> SignatifManifest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignatifManifest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SignatifManifest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SignatifManifest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.