Module jwt_policy_review 

Bounded, transport-free review of one explicitly supplied compact JWT.

This module deliberately supports only compact JWS objects signed with ES256 and one explicitly supplied local P-256 public JWK. It never follows key URLs or trusts token-carried key material. Parsing, local policy consistency, local signature verification, and target acceptance are four separate states; this module performs no target request.

Structs

Es256LocalPublicKey

One explicitly supplied local ES256 verification key.

JwtEvaluationTime

Caller-supplied local evaluation time. It is evidence about this process’s clock, not an observed target decision.

JwtExternalActivity

Network activity facts for the transport-free review.

JwtLocalPolicy

Non-secret local policy. Expected values are kept private, wiped on drop, and never included in the audit outcome or Debug output.

JwtPolicyMethodology

Value-free local methodology facts needed by strict saved reports and semantic comparison.

JwtPolicyReviewAudit

Value-free outcome of one bounded local review.

JwtTargetAcceptanceRuntimeInput

Move-only sealed handoff from local JWT preparation into the sole target runtime. Callers can carry this value alongside the public target policy, but cannot separate credentials, the local ineligibility reason, or the opaque per-preparation binding.

PreparedJwtTargetAcceptance

Local review plus an optional sealed credential handoff for the target acceptance child. A selected but locally ineligible token produces the local audit and no credential handoff, so it can never reach transport.

SecretCompactJwt

Move-only compact JWT bytes. The original token is wiped on drop and is never serializable or printable through Debug.

Enums

Es256PublicJwkError

Redaction-safe local public-JWK rejection.

JwtClockAssurance

Assurance attached to the local evaluation clock.

JwtExternalOperationStatus

Closed status for network operations excluded from this local slice.

JwtInputError

Redaction-safe compact-token input failure.

JwtLocalSignatureStatus

Signature relationship to the one explicitly supplied local public key.

JwtParseRejection

Static reason a compact input was not parsed into the supported profile.

JwtParsingStatus

Compact syntax/profile status.

JwtPolicyError

Redaction-safe local policy construction failure.

JwtPolicyStatus

Local policy relationship, independent of signature and target behavior.

JwtPolicyViolation

Value-free local policy inconsistency.

JwtTargetAcceptanceStatus

Target behavior state for this transport-free slice.

JwtTargetControlPreparationError

Redaction-safe invariant failure while deriving the one invalid-signature control. This is a local implementation error, not a target observation.

Constants

ES256_SIGNATURE_BYTES

ES256 uses a fixed-width R || S signature.

JWT_POLICY_REVIEW_AUDIT_SCHEMA

Stable schema identifier for the value-free audit outcome.

JWT_POLICY_REVIEW_POLICY_ID

Stable identifier for the initial local JWT policy evaluator.

MAX_CLOCK_SKEW_SECONDS

Maximum allowed clock-skew declaration.

MAX_COMPACT_JWT_BYTES

Maximum accepted compact JWT bytes.

MAX_JWT_CLAIMS_BYTES

Maximum decoded claims bytes.

MAX_JWT_HEADER_BYTES

Maximum decoded protected-header bytes.

MAX_LOCAL_PUBLIC_JWK_BYTES

Maximum accepted local public JWK bytes.

MAX_REQUIRED_CLAIMS

Maximum required claim names in one policy.

Functions

review_and_prepare_target_acceptance

Reviews one compact token locally and, only when every selected local gate succeeds, derives a sealed invalid-signature control for the explicitly selected target-acceptance child.

review_compact_jwt

Reviews one compact JWS without any network or filesystem activity.