Module secret 

Secret reference contracts for local secure material handling.

Structs

EnvSecretResolver

Resolves security references as environment variable names.

FileSecretResolver

Resolves relative security references below one owner-only root.

PeerCredential

Key identity and secret material used for one peer.

SecretBytes

Secret bytes that redact their debug representation and clear memory on drop.

SecuritySecretMaterial

Secret bytes paired with rotation metadata.

SecuritySecretMetadata

Non-secret metadata required for rotation and expiry policy.

SecuritySecretRef

Opaque reference in the security-store address space.

StaticPeerCredentialProvider

Deterministic peer credential provider backed by an immutable map.

StaticSecretResolver

Deterministic resolver backed by an immutable in-memory map.

Enums

SecretFormatError

Controlled secret material parsing or generation failure.

SecuritySecretStatus

Rotation lifecycle of secret material.

Traits

PeerCredentialProvider

Resolves credentials for direct peer authentication.

SecretResolver

Resolves opaque security-store references.

SecretStore

Contract for secret retrieval by opaque reference.

Functions

format_secret_material

Formats structured secret material for deployment-owned storage.

new_rotated_secret

Generates 256-bit rotation material using the operating-system random source.

parse_secret_material

Parses structured secret material.