Presently when using a CaveatBuilder or the declaratory Caveats interface in createDelegation, it's possible to specify caveats that are contradictory - for instance timestamp caveats that specify non-overlapping valid periods.
It could be useful for a caller to receive some sort of feedback about contradictory caveats. This could be:
validateCaveats utility function
- error thrown from
CaveatBuilder.build() or createDelegation
It could be helpful to parse the parent delegations if they exist (although if the parent delegation is a non-leaf, then it's less useful, and might provide a false sense of security).
Presently when using a
CaveatBuilderor the declaratoryCaveatsinterface increateDelegation, it's possible to specify caveats that are contradictory - for instancetimestampcaveats that specify non-overlapping valid periods.It could be useful for a caller to receive some sort of feedback about contradictory caveats. This could be:
validateCaveatsutility functionCaveatBuilder.build()orcreateDelegationIt could be helpful to parse the parent delegations if they exist (although if the parent delegation is a non-leaf, then it's less useful, and might provide a false sense of security).