Struct TrustedArtifact 

pub struct TrustedArtifact {
    pub version: ArtifactVersion,
    pub artifact_id: String,
    pub payload: Value,
    pub payload_schema: Option<String>,
    pub canonical_payload_hash: [u8; 32],
    pub co_signatures: Vec<CoSignatureBlock>,
}

A trusted artifact: payload + dimension attestations.

Fields

version: ArtifactVersion

Artifact format version.

artifact_id: String

Unique artifact identifier — bound into every co-signature to prevent replay onto other artifacts.

payload: Value

The domain payload (schema identified by $payload_schema).

payload_schema: Option<String>

URI identifying the payload schema.

canonical_payload_hash: [u8; 32]

SHA-256 of the JCS canonicalization of the payload.

co_signatures: Vec<CoSignatureBlock>

The dimension attestations converging on this artifact.

Implementations

impl TrustedArtifact

pub fn new( version: ArtifactVersion, artifact_id: impl Into<String>, payload: Value, payload_schema: Option<String>, ) -> SignatifResult<Self>

Create a new artifact, computing the canonical payload hash.

Errors

Propagates canonicalization errors.

pub fn cosign_input(&self, dimension: &DimensionTag) -> Vec<u8>

The signing input for a co-signature: artifact identity bound to the canonical payload hash, so blocks are artifact-specific and cannot be replayed across artifacts.

pub fn sign( &mut self, dimension: DimensionTag, algorithm: impl Into<String>, signer_cert_ref: impl Into<String>, signer_pubkey: Vec<u8>, chain_ref: impl Into<String>, signer: &dyn Fn(&[u8]) -> Vec<u8>, registry: &Registry, ) -> SignatifResult<()>

Produce a co-signature over this artifact (helper for signers).

Errors

Propagates canonicalization errors.

pub fn add_attestation( &mut self, block: CoSignatureBlock, registry: &Registry, ) -> SignatifResult<()>

Living artifacts: add a dimension attestation. The block must sign the original canonical payload hash — enforced because the signing input derives from the fixed hash and artifact id.

Errors

Returns a registry error for unknown dimensions or unusable algorithms.

pub fn verify_self( &self, registry: &Registry, verifier: &dyn SignatureVerifier, ) -> SignatifResult<()>

Verify the artifact’s self-consistency: the recorded canonical payload hash equals the hash of the current payload (detects any post-signing payload modification — signature wrapping prevention), and every block is verified independently against its own public key.

Errors

SignatifError::ArtifactFormat on hash mismatch or an unknown/retired algorithm; SignatifError::BadSignature when a block fails to verify.

pub fn dimensions_verified(&self) -> Vec<DimensionTag>

The distinct dimensions attested by currently-valid blocks.

pub fn distinct_roots(&self) -> Vec<String>

The distinct chain (root) references across blocks — feeds the coverage report’s independent-root count.

Trait Implementations

impl Clone for TrustedArtifact

fn clone(&self) -> TrustedArtifact

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustedArtifact

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustedArtifact

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustedArtifact

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.