6575ff1eb7
openpay/ (+3 crates)
op-bnpl/ Affirm + Klarna + Afterpay/Clearpay rails. Full lifecycle
typestate (Initiated→Approved→Captured→Settled→Refunded).
Per-provider sandbox+production base URLs, regions (NA/EU/OC
for Klarna; US/AuNz/Gb/Ca/Eu for Afterpay). HMAC-SHA256
webhook verification with constant-time compare. 61 tests.
op-batch/ NACHA ACH (94-char records, PPD/CCD/WEB/TEL/CTX, R01-R99
return codes, Same-Day ACH cutoffs); SEPA pain.001.001.09
(CT) + pain.008.001.08 (DD) with SCT-Inst flagging; Fedwire
MT103/MT202/CHIPS + pacs.008.001.12 / pacs.009.001.10 +
UETR; Bacs Standard 18. Per-rail cutoff scheduler. Exception
taxonomy unified across rails. 51 tests.
op-screening/ OFAC SDN + EU consolidated + UN consolidated + HMT UK
consolidated + Australia DFAT + Canada SEMA + Japan MOF.
Levenshtein + Jaro-Winkler + Soundex + Metaphone + token
Jaccard scoring. Unicode NFKD normalisation + Cyrillic /
Arabic transliteration. Ed25519-signed BLAKE3-chained
audit log. BSA helpers: CTR + SAR pattern detection
(structuring, round-dollar, rapid-in-out). 43 tests.
smart-byte/smart-byte-rs/ (+3 crates)
smart-byte-bbs/ BBS+ signatures (IETF draft-irtf-cfrg-bbs-signatures-08).
BLS12-381 keys, signatures, disclosure proofs with
cryptographic unlinkability. bbs-2023 Data Integrity
cryptosuite. AnonCreds-shaped link secrets +
predicate proofs. SecretKey zeroize-on-drop. 49 tests.
smart-byte-didcomm/ DIDComm v2 messaging per DIF spec. Pack-encrypted
(ECDH-1PU + ECDH-ES via X25519), pack-signed (JWS),
pack-plaintext. Aries protocols: issue-credential v3,
present-proof v3, basic-message, trust-ping, discover-
features, out-of-band, coordinate-mediation, message-
pickup. Mediator role with pluggable storage. 23 tests.
smart-byte-mdl/ ISO/IEC 18013-5 mobile driver's licence + 18013-7
online presentment. mDoc + MSO with salted-hash
selective disclosure (per item; SHA-256 digest tree).
org.iso.18013.5.1 namespace + AAMVA add-on. ES256
device-auth + issuer-auth. QR-code device-engagement
scaffolding. 28 tests.
eoc/eoc-rs/ (+3 crates)
eoc-local/ Local-inference backends behind one NeuralBackend:
llama.cpp (GGUF, Q4/Q5/Q6/Q8/F16/F32 quantisation),
MLX (Apple Silicon, feature-gated), MLC-LLM (TVM, feature-
gated marker), ONNX Runtime. GGUF file-format reader.
HuggingFace tokenizers. Greedy / top-k / top-p / temperature /
Mirostat samplers. Model registry scanning ~/.eoc/models/.
Joule attribution via eoc-meter. 39 tests.
eoc-rerank/ BM25 sparse + HNSW dense + RRF + min-max hybrid fusion.
Cohere v3.5 + Voyage v2 + bge-reranker v2-m3 + ms-marco
MiniLM + ColBERT v2 rerankers. Two-stage pipeline:
retrieve top-K hybrid → cross-encoder rerank → top-N.
KV-stage recovery shim into the cascade. 31 tests.
eoc-eval/ 15 canonical eval harnesses: MMLU, MMLU-Pro, GPQA,
HumanEval (pass@1 with python3 sandbox), BBH, IFEval (25
verifiable constraints), AlpacaEval, AGIEval, HellaSwag,
ARC (Easy + Challenge), TruthfulQA (MC1+MC2), BoolQ,
GSM8K, MATH (boxed-answer equivalence), Winogrande. Real
questions in BuiltinSamples. EvalRunner emits joules-per-
correct alongside accuracy. 49 tests.
Quality:
- cargo check across all three workspaces: clean
- cargo clippy --all-targets -- -D warnings on every new crate: clean
- 374 new tests, all passing
- #![forbid(unsafe_code)] across every new crate
- No unwrap/expect outside #[cfg(test)]
Rust 1.95.0 edition 2024 (inherited via root rust-toolchain.toml).
85 lines
2.5 KiB
Rust
85 lines
2.5 KiB
Rust
//! Typed errors for the mDL / mDOC ingestion path.
|
|
|
|
use thiserror::Error;
|
|
|
|
/// All errors produced by the `smart-byte-mdl` crate collapse to a
|
|
/// single typed enum so callers can match on the kind without depending
|
|
/// on intermediate crates.
|
|
#[derive(Debug, Error)]
|
|
pub enum MdlError {
|
|
/// CBOR encode or decode failed.
|
|
#[error("cbor error: {0}")]
|
|
Cbor(String),
|
|
|
|
/// COSE_Sign1 construction or parsing failed.
|
|
#[error("cose error: {0}")]
|
|
Cose(String),
|
|
|
|
/// Cryptographic signature verification failed.
|
|
#[error("signature verification failed: {0}")]
|
|
Signature(String),
|
|
|
|
/// Required field missing from a credential or transcript.
|
|
#[error("missing field: {0}")]
|
|
Missing(String),
|
|
|
|
/// A field's type or shape did not match the ISO 18013-5 schema.
|
|
#[error("type error: {0}")]
|
|
Type(String),
|
|
|
|
/// MSO digest did not match an issuer-signed item's hash.
|
|
#[error("digest mismatch in namespace {namespace} for element {element}")]
|
|
DigestMismatch {
|
|
/// CBOR namespace identifier (e.g. `org.iso.18013.5.1`).
|
|
namespace: String,
|
|
/// Element identifier (e.g. `family_name`).
|
|
element: String,
|
|
},
|
|
|
|
/// The MSO's validity window does not include the current time.
|
|
#[error("validity info out of range: now={now} signed={signed} valid_from={valid_from} valid_until={valid_until}")]
|
|
ValidityOutOfRange {
|
|
/// Current time presented by the verifier's clock.
|
|
now: String,
|
|
/// `signed` timestamp from the MSO.
|
|
signed: String,
|
|
/// `validFrom` timestamp from the MSO.
|
|
valid_from: String,
|
|
/// `validUntil` timestamp from the MSO.
|
|
valid_until: String,
|
|
},
|
|
|
|
/// No matching trust anchor accepted the issuer COSE_Sign1.
|
|
#[error("no trust anchor accepted issuer auth")]
|
|
NoTrustAnchor,
|
|
|
|
/// Smart Byte envelope bridge failed.
|
|
#[error("envelope bridge: {0}")]
|
|
Bridge(String),
|
|
|
|
/// Caller supplied an unsupported COSE algorithm.
|
|
#[error("unsupported algorithm: {0}")]
|
|
UnsupportedAlg(String),
|
|
|
|
/// Base64 decode failed.
|
|
#[error("base64 decode: {0}")]
|
|
Base64(String),
|
|
}
|
|
|
|
impl From<serde_cbor::Error> for MdlError {
|
|
fn from(e: serde_cbor::Error) -> Self {
|
|
MdlError::Cbor(e.to_string())
|
|
}
|
|
}
|
|
|
|
impl From<base64::DecodeError> for MdlError {
|
|
fn from(e: base64::DecodeError) -> Self {
|
|
MdlError::Base64(e.to_string())
|
|
}
|
|
}
|
|
|
|
impl From<coset::CoseError> for MdlError {
|
|
fn from(e: coset::CoseError) -> Self {
|
|
MdlError::Cose(format!("{e:?}"))
|
|
}
|
|
}
|