Module codemodule_signed 

uor_addr::schema::codemodule_signed — signed-code-module content-addressing (ARCHITECTURE.md “Schema-pinned descendants” § uor-addr-codemodule-signed).

Schema-pinned descendant of crate::json that imports the in-toto Statement v1 attestation format — the host-boundary parser admits only JSON-LD-style values conforming to in-toto’s published Statement contract per https://in-toto.io/Statement/v1.

no_std + no_alloc

Schema admission walks the parsed crate::json::JsonValue’s tagged bytes via crate::json::JsonValueRef. No serde_json, no allocator.

Authoritative sources

• in-toto Statement v1 — https://github.com/in-toto/attestation/blob/main/spec/v1/statement.md.
• SLSA Provenance v1 — https://slsa.dev/spec/v1.0/provenance.
• sigstore signature spec — https://docs.sigstore.dev/cosign/signature_specification/.

Admission predicate

1. _type is "https://in-toto.io/Statement/v1".
2. subject is a non-empty array; each element is an object with:
   • name — non-empty string.
   • digest — object with at least one sha256 entry whose value is a 64-character lowercase-hex SHA-256 digest.
3. predicateType — non-empty string IRI.
4. predicate — JSON object.

Structs

SignedCodeModuleValue

Enums

AddressFailure

Constants

REQUIRED_PROPERTIES

SHA256_HEX_BYTES

SHA-256 digest hex byte width.

STATEMENT_TYPE_IRI

in-toto Statement v1 _type IRI.

Functions

address

Mint a κ-label over an in-toto-v1-Statement-admitted JSON value.

address_blake3

As address, but binds the blake3 σ-axis (crate::hash). Schema admission is identical; only the κ-derivation hash differs.

address_keccak256

As address, but binds the keccak256 σ-axis (crate::hash). Schema admission is identical; only the κ-derivation hash differs.

address_sha3_256

As address, but binds the sha3_256 σ-axis (crate::hash). Schema admission is identical; only the κ-derivation hash differs.

address_sha512

As address, but binds the sha512 σ-axis (crate::hash).

canonicalize

Available only under the alloc feature.