Expand description
Storage-independent encrypted sync formats and cryptographic verification.
Re-exports§
pub use claim::membership;pub use claim::peer;pub use claim::publication;
Modules§
- artifact
- Descriptor, catalog and ordered whole-artifact verification. Structural verification does not authorize membership or publication.
- base64_
bytes - JSON transport spelling for opaque byte payloads: one canonical padded standard base64 string. The bytes themselves are what callers hash, sign and store.
- bootstrap
- Pure seed credential checks for bootstrap admission.
- claim
- Sequence-zero membership and one-vault claim, without transport.
- codec
- Canonical framing shared by the sync formats. Domain-separated inputs must stay byte-identical across every format that uses them.
- context
- images
- Image descriptor and exact retained-byte verification, independent of keys.
- record
- Exact encrypted-record framing and descriptor-bound headers.
- refusal
- Stable admission refusal codes. HTTP dispatch and refusal precedence are backend-owned.
- tail
- Current membership and generation rules for ordinary tail and image admission. Storage owners establish prefix identities, saved outcomes, parent state, attachment completeness and allocator ordering before committing effects.
- wire
- Storage-independent HTTP payloads. Transport and admission remain backend-owned.
- workspace
- Exact workspace identifier validation for ordinary image requests and moves.
Macros§
- refusal_
codes - The
Codesof a router family, e.g.codes!("enrollment").