Struct SigningIdentity 

pub struct SigningIdentity {
    pub public_key: Ed25519PublicKey,
    pub attestation_id: AttestationId,
    /* private fields */
}

Identity-side handle used by CollaborationManager::send_signed_op to mint signed envelopes. The secret key stays private — not re-exported on the manager’s public surface — so app code can only sign via the manager’s helper, never handle the raw secret.

Fields

public_key: Ed25519PublicKey

Public half — embedded as the author field on every signed op.

attestation_id: AttestationId

Role attestation the broker looks up ops against. One identity may hold attestations on multiple channels; this pins to one per manager.

Implementations

impl SigningIdentity

pub fn new( secret_key: SigningKey, attestation_id: AttestationId, ) -> SigningIdentity

Construct an identity from a fresh keypair and the attestation id that authorises it. Mostly used in tests; production code builds via the shell-side identity-loading helper.

pub fn sign_op( &mut self, payload: Vec<u8>, artifact: ArtifactId, kind: OpKind, ) -> Result<SignedOp, SignedSendError>

Build a fresh SignedOp envelope wrapping payload, bumping the internal seq so callers don’t need to track sequence numbers.

Errors

Returns SignedSendError::SequenceExhausted rather than ever reusing a sequence number, or SignedSendError::Canonical when payload fails to canonicalize for signing.