Struct SignaturePolicy 

pub struct SignaturePolicy {
    pub require_signatures: bool,
    pub minimum_trust_level: TrustLevel,
    pub require_post_quantum: bool,
}

Policy controlling how the package manager enforces signature verification.

Examples

// Production: require both Ed25519 and Dilithium, minimum Developer trust
let policy = SignaturePolicy::production();

// Development: skip all signature checks
let policy = SignaturePolicy::development();

Fields

require_signatures: bool

When true, packages must have a valid Ed25519 signature from a trusted key. When false, signature verification is skipped entirely.

minimum_trust_level: TrustLevel

Minimum trust level the signing key must have.

require_post_quantum: bool

When true, require a valid post-quantum (Dilithium/ML-DSA) signature in addition to the Ed25519 signature.

Implementations

impl SignaturePolicy

pub fn production() -> Self

Production policy: require Ed25519 signatures at Developer trust level. Post-quantum (Dilithium) is optional until ecosystem matures.

pub fn development() -> Self

Development policy: no signature requirements.

Trait Implementations

impl Clone for SignaturePolicy

fn clone(&self) -> SignaturePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignaturePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SignaturePolicy

fn default() -> Self

Returns the “default value” for a type.