Module bind_gate 

Per-bind public-exposure gate (ADR-0061 Rule 4).

Canonical home: camel-auth. The gate was born in camel-core (route_controller_trait, Task 1.9) and moved here in Task 2.6 so the MCP registry can enforce it too: components may not reference camel_core:: (hexagonal invariant, xtask lint-component-deps), while both camel-core and the transports already depend on camel-auth. camel-core re-exports both items from [crate::lifecycle::adapters::route_controller_trait], so existing callers (controller, CLI) keep their import paths.

Structs

BindExposureAcks

Operator acknowledgements for public exposure per bind address (ADR-0061). Plain map — camel-core stays camel-config-free; the CLI builds this from CamelConfig.binds and passes it into route staging.

Functions

enforce_bind_exposure_gate

Per-bind exposure gate (ADR-0061): a bind exposing Public routes on a non-loopback address refuses to start unless the operator acknowledged it. Loopback binds pass without acknowledgement. An acknowledged bind still emits a permanent warning naming the bind and route count — acknowledgement never silences the warning (ADR-0052 rule 3).