Class CredentialPublicationGate

java.lang.Object

zeroecho.pki.server.CredentialPublicationGate

public final class CredentialPublicationGate
extends Object

Synchronous stateless gate that freezes confirmation before leaf disclosure.

The gate accepts only a stable credential identity and an explicit typed owner. Credential metadata and the exact profile version frozen by issuance are resolved from authoritative session services. It never loads credential payload bytes.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	CredentialPublicationGate.AuditActor	Explicit administrative audit identity, distinct from credential ownership.

Method Summary

Modifier and Type	Method	Description
DisclosureService.Record	register(PkiId credentialId, Optional<DisclosureService.Owner> owner, CredentialPublicationGate.AuditActor auditActor)	Initializes or verifies confirmation, then registers or verifies disclosure.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

register

public DisclosureService.Record register(PkiId credentialId,
 Optional<DisclosureService.Owner> owner,
 CredentialPublicationGate.AuditActor auditActor)

Initializes or verifies confirmation, then registers or verifies disclosure.

Parameters:

credentialId - authoritative issued credential identity

owner - optional explicit owner; never inferred from the current actor

auditActor - explicit audit actor; never inferred from owner

Returns:

newly registered or exactly matching existing disclosure record

Throws:

IllegalArgumentException - if the credential or its frozen profile is unavailable

IllegalStateException - if authoritative state conflicts or the realm is closed