Enum LanPubkeyLookup 

pub(crate) enum LanPubkeyLookup {
    Found(Vec<u8>),
    NotFound,
    RateLimited,
}

Outcome of find_agent_lan_pubkey. Three states, not two — reagentx P0 follow-up on the LAN signing PR: collapsing “the lookup was skipped (rate-limited)” into the same None/“not found” outcome as “genuinely no peer has this key” let an attacker exhaust LAN_PUBKEY_LOOKUP_RATE_LIMIT with junk lookups, then slip a forged signature for a REAL agent’s identity through as unverified (benign) instead of a verification failure (forced sensitive). By the time this function is ever called, verify_lan_signature has already confirmed a lan_sig was actually presented — so “we didn’t check” must be distinguishable from “there was nothing to check.”

Variants

Found(Vec<u8>)

A peer has a public key on file for this agent_id.

NotFound

No peer (that answered) has ever minted a LAN key for this agent_id — genuinely unknown sender, not a red flag on its own (same “unverified, not escalated” treatment self-declared senders already get elsewhere in this system).

RateLimited

The lookup was skipped by the rate limiter — unknown, NOT the same as NotFound. Callers verifying an actual signature attempt must treat this conservatively (as a failure), never as “nothing to check.”