confium_pki/delegation/mod.rs
1//! Scoped certificate delegation templates.
2//!
3//! When a parent cert delegates bounded authority to a child cert, the
4//! child can issue/sign artifacts only within the delegated scope. This
5//! crate provides the scope types and validation logic.
6//!
7//! Example: OIML CNML Manufacturer Model Cert delegates to manufacturer
8//! the right to issue Instance Certs for a specific instrument model only.
9//!
10//! See `TODO.roadmap/32-cert-delegation-cms-xmldsig.md` for the full spec.
11
12#![forbid(unsafe_code)]
13#![allow(missing_docs)] // TODO: document before 1.0
14
15mod constraint;
16mod operation;
17mod scope;
18mod validate;
19
20pub use constraint::*;
21pub use operation::*;
22pub use scope::*;
23pub use validate::*;