Struct CanonicalBootstrapExpectation 

pub struct CanonicalBootstrapExpectation {
    pub strict: BTreeMap<ComponentId, (AppDataUpdateOperationType, Vec<u8>)>,
    pub expected_registry: BTreeMap<ComponentId, ComponentMetadata>,
    pub membership_sequence_ids: BTreeMap<InboxId, u64>,
    pub allowed_failed_installations: BTreeSet<[u8; 32]>,
}

The receiver-side bootstrap expectation. The validator picks the comparison strategy per component:

• Self::strict — byte-compared against the sender’s commit payload. Used for components whose canonical encoding is deterministic by construction: raw bytes/utf-8 (metadata attributes, COMMIT_LOG_SIGNER, CONVERSATION_TYPE), the versioned single-InboxId TLS wire form (CREATOR_INBOX_ID), and TLS-codec containers that sort their keys (ADMIN_LIST, SUPER_ADMIN_LIST, DM_MEMBERS, ONESHOT_MESSAGE).
• Self::expected_registry — COMPONENT_REGISTRY is decoded first, then compared per entry as a typed ComponentMetadata. The outer TlsMapDelta wrapper IS deterministic, but each entry’s value is a prost-encoded ComponentMetadata. Prost tag-order emission is theoretically deterministic, but byte-compare is brittle against future proto evolution (newly optional fields, default-value elision differences across encoder versions or language bindings) and produces useless diffs (“byte 47 differs”). Decoded compare side-steps both.
• Self::membership_sequence_ids — GROUP_MEMBERSHIP’s failed_installations is sender-authoritative (the migrator partitions per inbox by walking identity-update history, so different honest senders may legitimately disagree on bytes), so the validator only checks per-inbox sequence_id.
• Self::allowed_failed_installations — bounds the universe of installation IDs the sender may legally place into ANY per-inbox failed_installations. Drawn from the legacy GroupMembership.failed_installations flat list, with each entry length-checked to 32 bytes (Ed25519 installation key). The sender is allowed to drop entries (e.g., when the owning inbox can’t be determined) but not to add ones the legacy state never contained. Validator semantics: every per-inbox failed_installations entry must be 32 bytes AND present in this set.

Fields

strict: BTreeMap<ComponentId, (AppDataUpdateOperationType, Vec<u8>)>

expected_registry: BTreeMap<ComponentId, ComponentMetadata>

membership_sequence_ids: BTreeMap<InboxId, u64>

allowed_failed_installations: BTreeSet<[u8; 32]>

Trait Implementations

impl Clone for CanonicalBootstrapExpectation

fn clone(&self) -> CanonicalBootstrapExpectation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CanonicalBootstrapExpectation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CanonicalBootstrapExpectation

fn eq(&self, other: &CanonicalBootstrapExpectation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CanonicalBootstrapExpectation