Struct ApprovalPrincipal 

pub struct ApprovalPrincipal {
    pub source: ApprovalSource,
    pub identity: Option<String>,
    pub channel: Option<String>,
}

WHO resolved a gate and from WHERE. Recorded into the append-only ledger.

Fields

source: ApprovalSource

identity: Option<String>

Best-effort identity: pairing subject / bearer principal / agent alias / OS user for the loopback CLI. None for the system tick. Recorded, not trusted.

channel: Option<String>

The back-channel that answered (WS connection id, “cli”, agent name).

Implementations

impl ApprovalPrincipal

pub fn agent(agent_alias: &str) -> ApprovalPrincipal

The in-agent tool. Constructed inside sop_approve ONLY, so the agent can never claim another source.

pub fn cli(os_user: Option<String>) -> ApprovalPrincipal

The loopback CLI. Constructed in the gateway handler AFTER require_localhost.

pub fn ws(conn_id: String, subject: Option<String>) -> ApprovalPrincipal

The gateway WebSocket. Constructed from the resolved connection only.

pub fn http(subject: Option<String>) -> ApprovalPrincipal

The gateway HTTP route. Constructed from the resolved pairing subject only.

pub fn channel(channel_key: String, user: Option<String>) -> ApprovalPrincipal

A chat-channel gate answer. channel_key is the answering channel (discord.gnosis), user the platform user id that clicked/replied.

pub fn system() -> ApprovalPrincipal

The daemon timeout tick.

pub fn is_out_of_band(&self) -> bool

True when this principal is a DIFFERENT principal than the running agent. OutOfBandRequired mode requires this to clear a gate.

pub fn is_system(&self) -> bool

True for the synthetic timeout principal. A system approval is metered as a timeout auto-approval rather than a human approval (matches the ledger source == "system" reconstruction in rebuild_from_persistence).

pub fn actor_label(&self) -> String

Ledger actor string: prefer the identity, fall back to the source label.

pub fn voter_key(&self) -> String

Quorum-distinctness key. Qualified by the voter source (see Self::voter_source) so a different identity on a different source stays distinct, while the same paired credential over HTTP+WS counts once. Channel voters are additionally namespaced by channel key so same-looking sender ids from different channels/aliases cannot satisfy each other’s quorum. An identity-less principal keys to its source (and channel, for channel answers) so anonymous votes from one source count once and cannot inflate a quorum.

pub fn source_label(&self) -> &'static str

Stable wire label for the source (for ledger payloads / logs).

Trait Implementations

impl Clone for ApprovalPrincipal

fn clone(&self) -> ApprovalPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApprovalPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ApprovalPrincipal

fn deserialize<__D>( __deserializer: __D, ) -> Result<ApprovalPrincipal, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ApprovalPrincipal

fn eq(&self, other: &ApprovalPrincipal) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ApprovalPrincipal

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for ApprovalPrincipal

impl StructuralPartialEq for ApprovalPrincipal