Module supplemental_quota 

Verification boundary for supplemental invocation quotas.

The kernel treats supplemental authorization artifacts as opaque bytes. A trusted verifier installed by the runtime composition root parses and verifies those bytes, then returns a request-bound claim. The kernel checks every request binding again before exposing a quota owner or maximum.

Structs

CanonicalRevocationSet

The exact sorted revocation identifiers bound into an admission operation.

SupplementalQuotaVerificationContext

Request facts supplied by the kernel, never by the supplemental artifact.

SupplementalQuotaVerifierBinding

Runtime evidence identifying the installed supplemental verifier.

SupplementalQuotaVerifierError

Error returned by an installed supplemental verifier.

VerifiedSupplementalQuotaClaim

A claim returned by an installed trusted supplemental verifier.

Enums

SupplementalQuotaError

Constants

BROKER_CAPABILITY_EXECUTION_PROFILE

The only supplemental invocation-quota profile supported by v1.

MAX_ADMISSION_REVOCATION_IDS

MAX_SUPPLEMENTAL_AUTHORIZATION_BYTES

MAX_SUPPLEMENTAL_CLAIM_FIELD_BYTES

MAX_SUPPLEMENTAL_CONTEXT_FIELD_BYTES

MAX_SUPPLEMENTAL_NEGOTIATED_FEATURES

MAX_SUPPLEMENTAL_REVOCATION_IDS

MAX_SUPPLEMENTAL_REVOCATION_ID_BYTES

Traits

SupplementalQuotaVerifier

Trusted extension point installed by the runtime composition root.

Functions

supplemental_authorization_artifact_digest

Hash the opaque authorization artifact exactly as received by the kernel.

supplemental_request_binding_hash

Compute the request binding that a trusted verifier must return.