Module claim 

A claimed rotation job and its verification.

WorkSnapshot::verify cross-checks a claim’s two sealed values against each other and the plaintext claim. The pre-flight cipher read needs the network, so the access connector does it.

Only WorkSnapshot::verify can construct a VerifiedJob, so the connector never reads an unchecked claim field.

Structs

VerifiedJob

A claim cross-checked by WorkSnapshot::verify; private fields keep it constructible only there.

WorkSnapshot

The work snapshot returned by a successful claim; WorkSnapshot::verify checks it before any field is trusted.

Enums

SealRejection

Why WorkSnapshot::verify refused a claim. Carries no claim or blob values, only which check failed.

WorkSnapshotError

Errors from parsing a claim response. They never include payload content.