Struct Pipeline 

pub struct Pipeline<'a> {
    pub bundle: &'a TrustAnchorBundle,
    pub graph: &'a TrustGraph,
    pub registry: &'a Registry,
    pub verifier: &'a dyn SignatureVerifier,
    pub revocation: &'a dyn RevocationView,
    pub transparency: TransparencyInputs,
    pub freshness: FreshnessWindow,
    pub classification: &'a dyn ClassificationPolicy,
    pub acceptance: &'a AcceptancePolicy,
}

The ordered verification pipeline.

Fields

bundle: &'a TrustAnchorBundle

Anchor bundle (offline trust starting point).

graph: &'a TrustGraph

The trust graph (delegation DAG).

registry: &'a Registry

Scheme registries.

verifier: &'a dyn SignatureVerifier

Signature verifier fleet.

revocation: &'a dyn RevocationView

Revocation state view (CRLs and hash bindings).

transparency: TransparencyInputs

Soft-check inputs from transparency and time verification.

freshness: FreshnessWindow

Time-freshness window.

classification: &'a dyn ClassificationPolicy

Classification policy (scheme-defined).

acceptance: &'a AcceptancePolicy

Acceptance policy (verifier-defined).

Implementations

impl<'a> Pipeline<'a>

pub fn new( bundle: &'a TrustAnchorBundle, graph: &'a TrustGraph, registry: &'a Registry, verifier: &'a dyn SignatureVerifier, revocation: &'a dyn RevocationView, transparency: TransparencyInputs, acceptance: &'a AcceptancePolicy, ) -> Self

A pipeline with the reference classification policy.

pub fn with_classification(self, policy: &'a dyn ClassificationPolicy) -> Self

Override the classification policy.

pub fn with_freshness(self, window: FreshnessWindow) -> Self

Override the freshness window.

pub fn run( &self, artifact: &TrustedArtifact, now: DateTime<Utc>, ) -> SignatifResult<VerificationOutcome>

Run the pipeline. Hard checks in order: bundle validity, format validity + registry status, co-signature verification, chain path-finding (scope narrowing per link), revocation status. Soft checks accumulate: transparency, time anchor, multi-log quorum, dimension coverage, root diversity.

Errors

Returns the first hard failure encountered; the error is the machine-readable reason, the caller short-circuits to the rejected label.