Enum Constraint 

pub enum Constraint {
    ModelBound {
        model_id: String,
    },
    NameBound {
        name_pattern: String,
    },
    TimeBound {
        not_before: DateTime<Utc>,
        not_after: DateTime<Utc>,
    },
    CountBound {
        max_issuances: u32,
    },
    GeographicBound {
        regions: Vec<String>,
    },
    SubjectBound {
        subjects: Vec<String>,
    },
}

A constraint on delegated authority.

Variants

ModelBound

Bound to a specific model identifier (CNML Manufacturer Model Cert pattern).

Fields

model_id: String

The model identifier.

NameBound

Bound to a name pattern (e.g., “*.example.com”).

Fields

name_pattern: String

The name pattern (glob).

TimeBound

Time-bounded delegation.

Fields

not_before: DateTime<Utc>

When the delegation becomes valid.

not_after: DateTime<Utc>

When the delegation expires.

CountBound

Bounded by total issuance count.

Fields

max_issuances: u32

Maximum number of artifacts the child may issue.

GeographicBound

Bounded by geographic region.

Fields

regions: Vec<String>

Permitted regions.

SubjectBound

Bounded by subject-matter.

Fields

subjects: Vec<String>

Permitted subjects (e.g., “metrology”, “pharma”).

Implementations

impl Constraint

pub fn satisfies(&self, value: &ScopeValue<'_>) -> bool

Check whether value satisfies this constraint. value is the actual scope value extracted from the proposed child artifact (cert, document, etc.).

Trait Implementations

impl Clone for Constraint

fn clone(&self) -> Constraint

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Constraint

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Constraint

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Constraint

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.