Module core 

Core broker state, policy, backends, audit, and reconciliation.

Modules

actor

Authenticated authorization actor resolution.

audit

The JSONL audit sink (vault-vq5): persist every authorization decision.

backend

Pluggable signing / key-store backends.

capability

Backend capability enforcement: does each backend provide what the catalog requires?

catalog

Catalog + policy schema, loader, and resolution (design catalog-policy-schema.html).

crypto_provider

Provider-neutral crypto operation dispatch.

decision

The per-request authorization decision record (the audit hook point).

ed25519_sign

Ed25519 materialize-to-sign: the value-store signing crypto core.

event

Internal broker event source shared by Admin Watch and future SPIFFE streams.

manager

Multi-backend manager + per-key routing (design §2.2, §17.7).

minter

Credential minters.

ml_dsa_sign

ML-DSA (FIPS 204) software signing core for the local-software PQC provider.

ml_kem_envelope

ML-KEM envelope open/seal core for software-custodied sealing keys.

peer

Peer attestation for accepted connections.

reconcile

Startup catalog reconcile: apply each key’s missing policy (design §3.7).

reload

Signal-driven hot reload of the catalog/policy generation (basil-y3e).

revocation

JWT-SVID revocation deny-list.

seal

Sealed-bundle seal / open / slot management (vault-vh1).

state

Shared broker state: a hot-swappable policy generation + the backend manager, constructed once at startup and shared (Arc) across connections.

x25519_seal

X25519 sealed-box: the self-contained crypto core for enrollment unseal (basil-t9a, design §17.7: the materialize-to-use local-custody arm).

Functions

tpm_device_present

Whether a system TPM is present (resource-manager or raw device node).