run tree from tal pass

src/audit.rs

@@ -52,6 +52,18 @@ impl From<&crate::report::Warning> for AuditWarning {
 
 #[derive(Clone, Debug, Default, PartialEq, Eq, Serialize)]
 pub struct PublicationPointAudit {
+    /// Monotonic node ID assigned by the traversal engine.
+    ///
+    /// Present when running via the Stage2 tree engine; may be absent in ad-hoc runs.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub node_id: Option<u64>,
+    /// Parent node ID in the traversal tree.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub parent_node_id: Option<u64>,
+    /// Provenance metadata for non-root nodes (how this CA instance was discovered).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub discovered_from: Option<DiscoveredFrom>,
+
     pub rsync_base_uri: String,
     pub manifest_rsync_uri: String,
     pub publication_point_rsync_uri: String,
@@ -67,6 +79,13 @@ pub struct PublicationPointAudit {
     pub objects: Vec<ObjectAuditEntry>,
 }
 
+#[derive(Clone, Debug, PartialEq, Eq, Serialize)]
+pub struct DiscoveredFrom {
+    pub parent_manifest_rsync_uri: String,
+    pub child_ca_certificate_rsync_uri: String,
+    pub child_ca_certificate_sha256_hex: String,
+}
+
 #[derive(Clone, Debug, PartialEq, Eq, Serialize)]
 pub struct TreeSummary {
     pub instances_processed: usize,