[irzhywau]

Note

This is part of a stacked PR chain — review only the commits of this checkpoint; earlier work is in the PRs below it in the stack.

Stack (top → bottom)

• feat(protected-content): runtime lifecycle — mint, buy, play, purchase closeout #36 feat/protected-content-runtime-lifecycle
• ➡️ feat(protected-content): chain rights evidence and typed decisions #35 feat/protected-content-rights (this PR)
• feat(protected-content): Runtime release authority and persisted state #34 feat/protected-content-runtime
• feat(protected-content): sign rights requests with Wallet #33 feat/protected-content-wallet-rights
• feat(protected-content): custody provider protocol and process #32 feat/protected-content-custody-provider
• feat(protected-content): bridge authenticated release reconstruction #31 feat/protected-content-key-reconstruction
• feat(protected-content): threshold custody envelopes and key reconstruction #30 feat/protected-content-custody
• feat(protected-content): canonical content identities, rights grants, release contracts #29 feat/protected-content-contracts
• feat(collaboration): Profile/Chat product UI and Home window chrome #28 review/collaboration-product-integration
• feat(collaboration): signed network protocol, Carrier transport, Profile authority #27 review/collaboration-foundation
• main

Base: feat/protected-content-runtime ← Head: feat/protected-content-rights (checkpoint 9 of 10)

Commits

• 7c74725 feat(protected-content): add chain rights evidence
• a32ae85 feat(protected-content): evaluate typed rights decisions
• 43a83e5 docs(protected-content): define remaining product path

[irzhywau]

One commit was added on top of 43a83e5b: 3627da01, the merge of the updated parent feat/protected-content-runtime (checkpoint 8 tip, CI-green). No fixes were needed on this checkpoint itself.

Review notes: the provider_resource.rs change strengthens the review invariant — the legacy capsule-invokable Chain rights rail (chain/<network>/rights/has_access_by_content_id) is removed from capability space (now build-must-error), the new protected_content_rights_evidence op is asserted Runtime-internal, and the provisional rights-provider mapping is explicitly preserved until product cutover. The new elastos-protected-content-rights crate implements the node-side typed evaluator cleanly: node-key match, trusted chain evidence (30 s max lifetime) with binding validation against the authenticated release operation, decision expiry clamped to the tightest of the three governing windows, and the signed decision self-verified through the operation before it is returned. Zero panics/unwraps in non-test code.

Verified locally at the tip: all source gates incl. the provisional-retirement guard, cargo fmt --check, cargo clippy --workspace --all-targets -- -D warnings (cleaned fingerprints), cargo test --workspace — 1978 passed; only the known macOS mDNS-environment room::direct pair, green on this CI run.