decisionreceipt

const (
	// OperationBackupRestore activates one verified staged restore over the
	// live volumes.
	OperationBackupRestore = "backup_restore"
	// OperationApplicationRemove removes one application with its data.
	OperationApplicationRemove = "application_remove"
	// OperationAdvancedChangeSetApply applies one Owner-signed Advanced
	// change set.
	OperationAdvancedChangeSetApply = "advanced_change_set_apply"
	// OperationInstallationRemove removes the installation with its data.
	OperationInstallationRemove = "installation_remove"
)

const (
	PrincipalPerson        = "person"
	PrincipalAgentInstance = "agent_instance"
)

const (
	TargetApplication    = "application"
	TargetOwnApplication = "own-application"
	TargetRestore        = "restore"
	TargetChangeSet      = "change-set"
)

const (
	// RefusalInvalid covers the signature, the shape, the outcome and the
	// answering party.
	RefusalInvalid = "stackkit_receipt_invalid"
	// RefusalExpired covers a receipt outside its time window.
	RefusalExpired = "stackkit_receipt_expired"
	// RefusalSpent covers a receipt that was already used on this node.
	RefusalSpent = "stackkit_receipt_spent"
	// RefusalTargetMismatch covers a receipt that binds another operation,
	// target, digest, revision or acting principal.
	RefusalTargetMismatch = "stackkit_receipt_target_mismatch"
)

const (
	// ReceiptType is the JWS protected header type of a decision receipt.
	ReceiptType = "kombify.decision-receipt.v1"
	// SubjectStore is the only ledger subject this consumer admits. A RIL
	// action receipt names another store and is refused here; that check is
	// what keeps one receipt from passing for the other.
	SubjectStore = "stackkit_operation"
	// IntentDigestDomain separates the intent digest from every other digest.
	IntentDigestDomain = "kombify.decision-intent.digest.v1"
	// RiskDestructive is the risk the ledger records for a StackKits operation.
	RiskDestructive = "destructive"
	// OutcomeAllowed and OptionAllowOnce are the only answer profile a
	// consumer admits.
	OutcomeAllowed  = "allowed"
	OptionAllowOnce = "allow_once"
	// AnsweredByPerson is the only answering party.
	AnsweredByPerson = "person"
	// SurfaceEquipment is the surface a person's answer may never carry.
	SurfaceEquipment = "equipment"
	// LifetimeOnce is the only lifetime scope.
	LifetimeOnce = "once"
)

const ArgumentsDigestDomain = "kombify.stackkit-operation-arguments.digest.v1"

const MaxReceiptLifetime = 900 * time.Second