Struct InMemoryFederationArtifactStore 

pub struct InMemoryFederationArtifactStore { /* private fields */ }

Reference in-memory implementation (test double and default backing when a deployment wants durable bilateral evidence without a database). Capped, idle-swept, gauged instead of an unbounded HashMap: even though this store has no install seam today, it must not become a footgun once a follow-on wires one up. A deployment requiring persistence installs a database-backed impl instead.

Implementations

impl InMemoryFederationArtifactStore

pub fn with_capacity(capacity: usize, idle_ttl_secs: u64) -> Self

Construct with an explicit per-map capacity and idle TTL. This is the seam that lets a deployment wiring this reference store in from a CONFIGURED process memory budget honor a lowered federation_cache_capacity instead of the compiled-in 8192 default, so the store cannot exceed the operator’s configured federation memory budget even though the kernel’s front caches honor it. Same seam class as the velocity/journal from_memory_budget constructors.

pub fn from_memory_budget(budget: &MemoryBudgetConfig) -> Self

Construct from a CONFIGURED process memory budget so lowering federation_cache_capacity / federation_cache_idle_ttl_secs actually bounds each backing map, rather than every deployment retaining the compiled-in 8192-entry default.

pub fn dual_signed_len(&self) -> usize

Live occupancy of the dual-signed-receipt backing map.

pub fn dsse_len(&self) -> usize

Live occupancy of the DSSE-envelope backing map.

Trait Implementations

impl Default for InMemoryFederationArtifactStore

fn default() -> Self

Returns the “default value” for a type.

impl FederationArtifactStore for InMemoryFederationArtifactStore

fn put_dual_signed( &self, id: &str, receipt: &DualSignedReceipt, ) -> Result<(), KernelError>

fn get_dual_signed( &self, id: &str, ) -> Result<Option<DualSignedReceipt>, KernelError>

fn put_dsse(&self, id: &str, envelope: &DsseEnvelope) -> Result<(), KernelError>

fn get_dsse(&self, id: &str) -> Result<Option<DsseEnvelope>, KernelError>

fn is_durable(&self) -> bool

Whether a written artifact survives once the kernel’s bounded front caches evict it, so an evicted id is still resolvable through this store. Only a persistent backend (database, object store) whose writes outlive eviction returns true; a bounded, drop-evicting in-memory store returns false because it can evict the same id the front caches did.