Crate brynja 

Security-first, first-party Rust no_std cryptography and protocol facade.

This release exposes checked numeric/resource domains, transactional borrowed cursors, caller-owned workspaces, secret-lifetime and owned-memory foundations, fixed-width constant-time operations, provider capability contracts with opaque exact-operation handles, and typed wall and monotonic clocks. Pending certificate, external-signature, and accelerator operations have an affine bounded lifecycle. An inert FIPS-aware architecture freezes service, environment, SSP, self-test, and permanent-failure contracts without implementing or claiming a validated module. Mandatory typed security outcomes now bind exact decision domains to authoritative state, including token-gated external-key destruction. Bounded observational events duplicate those outcomes without gaining authority. Shared TLS and DTLS record envelopes are now parsed and encoded independently of protocol selection. A bounded borrowed DER reader now exposes canonical framing without ASN.1 or X.509 semantics. This crate does not provide a TLS connection API, provider implementation, or cryptographic algorithm.

Re-exports

pub use brynja_core as core;

pub use brynja_crypto as crypto;

pub use brynja_pki as pki;

pub use brynja_protocol as protocol;

pub use brynja_tls as tls;

Constants

IMPLEMENTED

Whether this facade provides its complete planned protocol implementation.