Struct VaultContainerV2 

pub struct VaultContainerV2 {
    pub version: u16,
    pub layers: Vec<Layer>,
    pub keychain_wrapped: bool,
    pub vault_id: Option<String>,
    pub audit_log: Vec<AuditRecord>,
}

The v2 vault container.

Fields

version: u16

layers: Vec<Layer>

keychain_wrapped: bool

vault_id: Option<String>

audit_log: Vec<AuditRecord>

Append-only audit DAG (ADR §10): the sealed records a decoy session writes but cannot read. Only the real lane holds the audit secret that opens each record’s sealed blob. The vault code only ever appends here; the per-branch head anchor (held inside the real lane’s encrypted records) is what makes truncation / rewrite of the witnessed prefix detectable.

Implementations

impl VaultContainerV2

pub fn new( layers: Vec<Layer>, keychain_wrapped: bool, vault_id: Option<String>, ) -> Result<Self, String>

Build a container from the in-use layers, padded to constant shape. Errors if there are more in-use layers than CONTAINER_SLOTS.

pub fn to_cbor(&self) -> Result<Vec<u8>, String>

Serialize to CBOR bytes.

pub fn from_cbor(bytes: &[u8]) -> Result<Self, String>

Deserialize from CBOR bytes.

pub fn layer_by_role(&self, role: LayerRole) -> Option<&Layer>

Find a layer by role (first match).

pub fn pad_to_constant_shape(&mut self)

Pad with reserved layers up to CONTAINER_SLOTS so the layer count is constant.

Trait Implementations

impl Clone for VaultContainerV2

fn clone(&self) -> VaultContainerV2

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VaultContainerV2

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for VaultContainerV2

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for VaultContainerV2

fn eq(&self, other: &VaultContainerV2) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for VaultContainerV2

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for VaultContainerV2

impl StructuralPartialEq for VaultContainerV2