Struct PerFlowActivation 

pub struct PerFlowActivation {
    pub cell_id: String,
    pub run_id: String,
    pub nflog_group: u16,
    pub backend: PerFlowBackend,
    pub policy_digest: Option<String>,
    pub keyset_id: Option<String>,
    pub issuer_kid: Option<String>,
}

Activation context for the per-flow listener.

Constructed once per Supervisor::run when the env gate is on; consumed by spawn_per_flow_listener_in_netns when the workload child PID is known. Mirrors the shape of crate::dns_proxy::spawn::EventSinkEmitter

• activation pair.

Fields

cell_id: String

Portable cell identifier (stamped into emitted events).

run_id: String

Run UUID/identifier (stamped into emitted events).

nflog_group: u16

nfnetlink_log group bound by the listener (matches the log group N action in the augmented ruleset).

backend: PerFlowBackend

Backend in effect (resolves at activation time so the warning fires once per run rather than per packet).

policy_digest: Option<String>

Optional sha256 digest of the policy bundle, stamped into events.

keyset_id: Option<String>

Optional trust-keyset id stamped into events.

issuer_kid: Option<String>

Optional issuer kid stamped into events.