Reading a Signature as a Contract

Every element of a Rust signature is a promise to the caller. Consider this method, without its body:

pub fn arm(&mut self) -> Result<ArmedToken, ArmError>

How many promises can you read out of it?

List as many as you can before looking at the next page.