Expand description
Chio Runtime Kernel.
The kernel is the trusted computing base (TCB) of the Chio protocol. It sits between the untrusted agent and the sandboxed tool servers, mediating every tool invocation.
The kernel’s responsibilities:
- Capability validation – verify signatures, time bounds, revocation status, scope matching, and invocation budgets.
- Guard evaluation – run policy guards against the tool call before forwarding it.
- Receipt signing – produce a signed receipt for every decision (allow or deny) and append it to the receipt log.
- Tool dispatch – forward validated requests to the appropriate tool server over an authenticated channel.
The kernel is architecturally invisible to the agent. The agent communicates through an anonymous pipe or Unix domain socket and never learns the kernel’s PID, address, or signing key.
Re-exports§
pub use threshold_approval::CollectedThresholdApprovalSet;pub use threshold_approval::InMemoryThresholdApprovalCollectorStore;pub use threshold_approval::ThresholdApprovalCollector;pub use threshold_approval::ThresholdApprovalCollectorProposal;pub use threshold_approval::ThresholdApprovalCollectorState;pub use threshold_approval::ThresholdApprovalCollectorStore;pub use threshold_approval::ThresholdApprovalCollectorStoreError;pub use approval::compute_parameter_hash;pub use approval::resume_with_decision;pub use approval::ApprovalChannel;pub use approval::ApprovalContext;pub use approval::ApprovalDecision;pub use approval::ApprovalFilter;pub use approval::ApprovalGuard;pub use approval::ApprovalOutcome;pub use approval::ApprovalRequest;pub use approval::ApprovalStore;pub use approval::ApprovalStoreError;pub use approval::ApprovalToken;pub use approval::BatchApproval;pub use approval::BatchApprovalStore;pub use approval::ChannelError;pub use approval::ChannelHandle;pub use approval::HitlVerdict;pub use approval::InMemoryApprovalStore;pub use approval::InMemoryBatchApprovalStore;pub use approval::ResolvedApproval;pub use approval::MAX_APPROVAL_TTL_SECS;pub use approval_channels::RecordingChannel;pub use approval_channels::WebhookChannel;pub use approval_channels::WebhookPayload;pub use authority::ensure_capability_issuance_supported;pub use authority::validate_issued_capability_response;pub use authority::validate_issued_capability_response_at;pub use authority::AuthoritySnapshot;pub use authority::AuthorityStatus;pub use authority::AuthorityStoreError;pub use authority::AuthorityTrustedKeySnapshot;pub use authority::CapabilityAuthority;pub use authority::LocalCapabilityAuthority;pub use budget_store::BudgetStore;pub use budget_store::BudgetStoreError;pub use budget_store::BudgetUsageRecord;pub use budget_store::InMemoryBudgetStore;pub use capability_lineage::CapabilityLineageError;pub use capability_lineage::CapabilitySnapshot;pub use capability_lineage::CapabilitySnapshotProvenance;pub use capability_lineage::StoredCapabilitySnapshot;pub use checkpoint::build_checkpoint;pub use checkpoint::build_checkpoint_with_previous;pub use checkpoint::build_inclusion_proof;pub use checkpoint::checkpoint_body_sha256;pub use checkpoint::is_supported_checkpoint_schema;pub use checkpoint::verify_checkpoint_continuity;pub use checkpoint::verify_checkpoint_signature;pub use checkpoint::CheckpointError;pub use checkpoint::KernelCheckpoint;pub use checkpoint::KernelCheckpointBody;pub use checkpoint::ReceiptInclusionProof;pub use checkpoint::CHECKPOINT_SCHEMA;pub use checkpoint::CHECKPOINT_SCHEMA_V1;pub use checkpoint::CHECKPOINT_SCHEMA_V2;pub use compliance_score::compliance_factor_breakdown;pub use compliance_score::compliance_score;pub use compliance_score::ComplianceFactor;pub use compliance_score::ComplianceFactorBreakdown;pub use compliance_score::ComplianceScore;pub use compliance_score::ComplianceScoreConfig;pub use compliance_score::ComplianceScoreInputs;pub use compliance_score::COMPLIANCE_SCORE_MAX;pub use compliance_score::DEFAULT_ATTESTATION_STALENESS_SECS;pub use compliance_score::WEIGHT_ATTESTATION_FRESHNESS;pub use compliance_score::WEIGHT_DENY_RATE;pub use compliance_score::WEIGHT_POLICY_COVERAGE;pub use compliance_score::WEIGHT_REVOCATION;pub use compliance_score::WEIGHT_VELOCITY_ANOMALY;pub use cost_attribution::CostAttributionChainHop;pub use cost_attribution::CostAttributionQuery;pub use cost_attribution::CostAttributionReceiptRow;pub use cost_attribution::CostAttributionReport;pub use cost_attribution::CostAttributionSummary;pub use cost_attribution::LeafCostAttributionRow;pub use cost_attribution::RootCostAttributionRow;pub use cost_attribution::MAX_COST_ATTRIBUTION_LIMIT;pub use custody::PasskeyCapabilityVerifier;pub use dpop::is_supported_dpop_schema;pub use dpop::verify_dpop_proof;pub use dpop::DpopConfig;pub use dpop::DpopNonceStore;pub use dpop::DpopProof;pub use dpop::DpopProofBody;pub use dpop::DPOP_SCHEMA;pub use evidence_export::EvidenceChildReceiptRecord;pub use evidence_export::EvidenceChildReceiptScope;pub use evidence_export::EvidenceExportBundle;pub use evidence_export::EvidenceExportError;pub use evidence_export::EvidenceExportQuery;pub use evidence_export::EvidenceRetentionMetadata;pub use evidence_export::EvidenceToolReceiptRecord;pub use evidence_export::EvidenceUncheckpointedReceipt;pub use execution_nonce::is_supported_execution_nonce_schema;pub use execution_nonce::mint_execution_nonce;pub use execution_nonce::verify_execution_nonce;pub use execution_nonce::ExecutionNonceConfig;pub use execution_nonce::ExecutionNonceError;pub use execution_nonce::ExecutionNonceStore;pub use execution_nonce::InMemoryExecutionNonceStore;pub use execution_nonce::DEFAULT_EXECUTION_NONCE_STORE_CAPACITY;pub use execution_nonce::DEFAULT_EXECUTION_NONCE_TTL_SECS;pub use execution_nonce::EXECUTION_NONCE_SCHEMA;pub use memory_provenance::classify_memory_action;pub use memory_provenance::next_entry_id as next_memory_provenance_entry_id;pub use memory_provenance::recompute_entry_hash as recompute_memory_provenance_entry_hash;pub use memory_provenance::InMemoryMemoryProvenanceStore;pub use memory_provenance::MemoryActionKind;pub use memory_provenance::MemoryProvenanceAppend;pub use memory_provenance::MemoryProvenanceEntry;pub use memory_provenance::MemoryProvenanceError;pub use memory_provenance::MemoryProvenanceStore;pub use memory_provenance::ProvenanceVerification;pub use memory_provenance::UnverifiedReason;pub use memory_provenance::MEMORY_PROVENANCE_ENTRY_SCHEMA;pub use memory_provenance::MEMORY_PROVENANCE_GENESIS_PREV_HASH;pub use observability::metrics::guard_metrics_endpoint;pub use observability::metrics::record_receipt_health_gauges;pub use observability::metrics::render_guard_metrics_prometheus;pub use observability::metrics::GuardMetricFamily;pub use observability::metrics::MetricsEndpointResponse;pub use observability::metrics::GUARD_METRICS_PATH;pub use observability::metrics::GUARD_METRIC_FAMILIES;pub use observability::metrics::PROMETHEUS_TEXT_CONTENT_TYPE;pub use operator_report::behavioral_anomaly_score;pub use operator_report::BehavioralAnomalyScore;pub use operator_report::EmaBaselineState;pub use operator_report::AuthorizationContextReport;pub use operator_report::AuthorizationContextRow;pub use operator_report::AuthorizationContextSenderConstraint;pub use operator_report::AuthorizationContextSummary;pub use operator_report::BehavioralFeedDecisionSummary;pub use operator_report::BehavioralFeedGovernedActionSummary;pub use operator_report::BehavioralFeedMeteredBillingRow;pub use operator_report::BehavioralFeedMeteredBillingSummary;pub use operator_report::BehavioralFeedPrivacyBoundary;pub use operator_report::BehavioralFeedQuery;pub use operator_report::BehavioralFeedReceiptRow;pub use operator_report::BehavioralFeedReceiptSelection;pub use operator_report::BehavioralFeedReport;pub use operator_report::BehavioralFeedReputationSummary;pub use operator_report::BehavioralFeedSettlementSummary;pub use operator_report::BudgetDimensionProfile;pub use operator_report::BudgetDimensionUsage;pub use operator_report::BudgetUtilizationReport;pub use operator_report::BudgetUtilizationRow;pub use operator_report::BudgetUtilizationSummary;pub use operator_report::ChioOAuthArtifactBoundary;pub use operator_report::ChioOAuthAuthorizationDiscoveryMetadata;pub use operator_report::ChioOAuthAuthorizationExampleMapping;pub use operator_report::ChioOAuthAuthorizationMetadataReport;pub use operator_report::ChioOAuthAuthorizationProfile;pub use operator_report::ChioOAuthAuthorizationReviewPack;pub use operator_report::ChioOAuthAuthorizationReviewPackRecord;pub use operator_report::ChioOAuthAuthorizationReviewPackSummary;pub use operator_report::ChioOAuthAuthorizationSupportBoundary;pub use operator_report::ChioOAuthRequestTimeContract;pub use operator_report::ChioOAuthResourceBinding;pub use operator_report::ChioOAuthSenderConstraintProfile;pub use operator_report::ComplianceReport;pub use operator_report::EconomicCompletionFlowReport;pub use operator_report::EconomicCompletionFlowSummary;pub use operator_report::EconomicReceiptMeteringProjection;pub use operator_report::EconomicReceiptProjectionReport;pub use operator_report::EconomicReceiptProjectionRow;pub use operator_report::EconomicReceiptProjectionSummary;pub use operator_report::EconomicReceiptSettlementProjection;pub use operator_report::GovernedAuthorizationCommerceDetail;pub use operator_report::GovernedAuthorizationDetail;pub use operator_report::GovernedAuthorizationMeteredBillingDetail;pub use operator_report::GovernedAuthorizationTransactionContext;pub use operator_report::MeteredBillingEvidenceRecord;pub use operator_report::MeteredBillingReconciliationReport;pub use operator_report::MeteredBillingReconciliationRow;pub use operator_report::MeteredBillingReconciliationState;pub use operator_report::MeteredBillingReconciliationSummary;pub use operator_report::OperatorReport;pub use operator_report::OperatorReportQuery;pub use operator_report::SettlementReconciliationReport;pub use operator_report::SettlementReconciliationRow;pub use operator_report::SettlementReconciliationState;pub use operator_report::SettlementReconciliationSummary;pub use operator_report::SignedBehavioralFeed;pub use operator_report::BEHAVIORAL_FEED_SCHEMA;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_COMMERCE_DETAIL_TYPE;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_CONTEXT_REPORT_SCHEMA;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_METADATA_SCHEMA;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_METERED_BILLING_DETAIL_TYPE;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_PROFILE_ID;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_PROFILE_SCHEMA;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_REVIEW_PACK_SCHEMA;pub use operator_report::CHIO_OAUTH_AUTHORIZATION_TOOL_DETAIL_TYPE;pub use operator_report::CHIO_OAUTH_REQUEST_TIME_AUTHORIZATION_DETAILS_CLAIM;pub use operator_report::CHIO_OAUTH_REQUEST_TIME_AUTHORIZATION_DETAILS_PARAMETER;pub use operator_report::CHIO_OAUTH_REQUEST_TIME_TRANSACTION_CONTEXT_CLAIM;pub use operator_report::CHIO_OAUTH_REQUEST_TIME_TRANSACTION_CONTEXT_PARAMETER;pub use operator_report::CHIO_OAUTH_SENDER_BINDING_CAPABILITY_SUBJECT;pub use operator_report::CHIO_OAUTH_SENDER_CONSTRAINT_SCHEMA;pub use operator_report::CHIO_OAUTH_SENDER_PROOF_CHIO_DPOP;pub use operator_report::ECONOMIC_COMPLETION_FLOW_SCHEMA;pub use operator_report::MAX_AUTHORIZATION_CONTEXT_LIMIT;pub use operator_report::MAX_BEHAVIORAL_FEED_RECEIPT_LIMIT;pub use operator_report::MAX_METERED_BILLING_LIMIT;pub use operator_report::MAX_OPERATOR_BUDGET_LIMIT;pub use operator_report::MAX_SETTLEMENT_BACKLOG_LIMIT;pub use operator_report::MAX_SHARED_EVIDENCE_LIMIT;pub use payment::AcpPaymentAdapter;pub use payment::CommercePaymentContext;pub use payment::GovernedPaymentContext;pub use payment::PaymentAdapter;pub use payment::PaymentAuthorization;pub use payment::PaymentAuthorizationState;pub use payment::PaymentAuthorizeRequest;pub use payment::PaymentError;pub use payment::PaymentJournalError;pub use payment::PaymentJournalRecord;pub use payment::PaymentJournalState;pub use payment::PaymentJournalTransition;pub use payment::PaymentRailMode;pub use payment::PaymentReleaseAuthorityBinding;pub use payment::PaymentReleaseAuthorityKind;pub use payment::PaymentResult;pub use payment::PaymentSettleAction;pub use payment::RailSettlementState;pub use payment::RailSettlementStatus;pub use payment::ReceiptSettlement;pub use payment::X402PaymentAdapter;pub use post_invocation::PipelineOutcome;pub use post_invocation::PostInvocationContext;pub use post_invocation::PostInvocationHook;pub use post_invocation::PostInvocationHookIdentity;pub use post_invocation::PostInvocationPipeline;pub use post_invocation::PostInvocationVerdict;pub use provider_verdict::build_tool_call_request;pub use provider_verdict::canonical_invocation_bytes;pub use provider_verdict::verdict_result_from_response;pub use provider_verdict::ProviderVerdictError;pub use provider_verdict::FABRIC_SHIM_PROVIDER_LANES;pub use receipt_analytics::AgentAnalyticsRow;pub use receipt_analytics::AnalyticsTimeBucket;pub use receipt_analytics::ReceiptAnalyticsMetrics;pub use receipt_analytics::ReceiptAnalyticsQuery;pub use receipt_analytics::ReceiptAnalyticsResponse;pub use receipt_analytics::TimeAnalyticsRow;pub use receipt_analytics::ToolAnalyticsRow;pub use receipt_analytics::MAX_ANALYTICS_GROUP_LIMIT;pub use receipt_query::EffectiveReceiptReadScope;pub use receipt_query::ReceiptQuery;pub use receipt_query::ReceiptQueryResult;pub use receipt_query::ReceiptReadBoundary;pub use receipt_query::ReceiptReadContext;pub use receipt_query::ReceiptReadContextSource;pub use receipt_query::MAX_QUERY_LIMIT;pub use receipt_store::AdmissionBudgetAuthorization;pub use receipt_store::AdmissionBudgetAuthorizationError;pub use receipt_store::AdmissionBudgetCapture;pub use receipt_store::AdmissionPaymentJournalAdvance;pub use receipt_store::AdmissionPaymentJournalError;pub use receipt_store::AdmissionPaymentSettlement;pub use receipt_store::AdmissionPaymentSettlementBegin;pub use receipt_store::AtomicReceiptProjection;pub use receipt_store::AuthorizationReceiptConsumption;pub use receipt_store::PendingSettlementObservation;pub use receipt_store::QualifiedAdmissionProjectionStore;pub use receipt_store::ReceiptCheckpointCreateReport;pub use receipt_store::ReceiptCheckpointRange;pub use receipt_store::ReceiptCheckpointStatusReport;pub use receipt_store::ReceiptFlushReport;pub use receipt_store::ReceiptStore;pub use receipt_store::ReceiptStoreError;pub use receipt_store::ReceiptStoreHealthReport;pub use receipt_store::ReceiptWalCheckpointReport;pub use receipt_store::ReceiptWriterCounters;pub use receipt_store::ReceiptWriterLiveness;pub use receipt_store::RetentionConfig;pub use receipt_store::StoredChildReceipt;pub use receipt_store::StoredToolReceipt;pub use receipt_store::ThresholdApprovalReplayReservationV1;pub use receipt_store::ADMISSION_TERMINAL_PROJECTION_DESCRIPTOR_KIND;pub use revocation_runtime::InMemoryRevocationStore;pub use revocation_runtime::RevocationObservation;pub use revocation_runtime::RevocationStore;pub use revocation_store::RevocationRecord;pub use revocation_store::RevocationStoreError;pub use runtime::NestedFlowBridge;pub use runtime::NestedFlowClient;pub use runtime::ToolCallChunk;pub use runtime::ToolCallOutput;pub use runtime::ToolCallRequest;pub use runtime::ToolCallResponse;pub use runtime::ToolCallStream;pub use runtime::ToolInvocationCost;pub use runtime::ToolServerConnection;pub use runtime::ToolServerEvent;pub use runtime::ToolServerOutput;pub use runtime::ToolServerStreamResult;pub use runtime::Verdict;pub use session::InflightRegistry;pub use session::InflightRequest;pub use session::LateSessionEvent;pub use session::PeerCapabilities;pub use session::Session;pub use session::SessionError;pub use session::SessionOperationResponse;pub use session::SessionPersistError;pub use session::SessionState;pub use session::SubscriptionRegistry;pub use session::TerminalRegistry;pub use supplemental_quota::supplemental_request_binding_hash;pub use supplemental_quota::CanonicalRevocationSet;pub use supplemental_quota::SupplementalQuotaError;pub use supplemental_quota::SupplementalQuotaVerificationContext;pub use supplemental_quota::SupplementalQuotaVerifier;pub use supplemental_quota::SupplementalQuotaVerifierBinding;pub use supplemental_quota::SupplementalQuotaVerifierError;pub use supplemental_quota::VerifiedSupplementalQuotaClaim;pub use supplemental_quota::BROKER_CAPABILITY_EXECUTION_PROFILE;pub use supplemental_quota::MAX_ADMISSION_REVOCATION_IDS;pub use supplemental_quota::MAX_SUPPLEMENTAL_AUTHORIZATION_BYTES;pub use supplemental_quota::MAX_SUPPLEMENTAL_CLAIM_FIELD_BYTES;pub use supplemental_quota::MAX_SUPPLEMENTAL_CONTEXT_FIELD_BYTES;pub use supplemental_quota::MAX_SUPPLEMENTAL_NEGOTIATED_FEATURES;pub use supplemental_quota::MAX_SUPPLEMENTAL_REVOCATION_IDS;pub use supplemental_quota::MAX_SUPPLEMENTAL_REVOCATION_ID_BYTES;pub use weights_binding::evaluate_weights_binding;pub use weights_binding::WeightsBindingError;pub use weights_binding::WeightsBindingRequest;
Modules§
- admission_
operation - approval
- Human-in-the-loop (HITL) primitives.
- approval_
channels - Approval channels for HITL signaling.
- authority
- boot
- Kernel boot path: gate the PQ signing key load on a self-quote.
- budget_
store - capability_
lineage - Capability lineage index for Chio kernel.
- checkpoint
- Merkle-committed receipt batch checkpointing.
- compliance_
certificate - Session compliance certificate issuance with hybrid signing.
- compliance_
score - Compliance scoring built on top of
ComplianceReport. - cost_
attribution - custody
- Kernel-side passkey-capability verification.
- dispatch_
status - Closed verification boundary for provider-side dispatch recovery.
- dpop
- DPoP (Demonstration of Proof-of-Possession) for Chio tool invocations.
- evidence_
export - execution_
nonce - Execution nonces prevent TOCTOU races between capability evaluation and tool-server dispatch.
- federation_
artifact_ store - Additive durable seam for bilateral co-sign artifacts. The kernel caches DualSignedReceipt / DsseEnvelope in a capped, idle-swept BoundedMap; when a FederationArtifactStore is configured, the co-sign hook writes through to it first, and accessors fall through to it on a cache miss.
- governed_
active_ response - memory_
provenance - Memory-entry provenance.
- observability
- Kernel observability surfaces.
- operator_
report - otel
- OpenTelemetry semantic-convention helpers for Chio tool calls.
- payment
- post_
invocation - Post-invocation hook pipeline executed after a tool returns output.
- provider_
verdict - Provider-fabric verdict shim.
- receipt_
analytics - receipt_
query - receipt_
store - revocation_
runtime - revocation_
store - runtime
- session
- settlement_
observer - Settlement observer surface. Re-exported so integration tests and embedders can drive a SettlementHook against finalized receipts without reaching into crate-private module paths.
- supplemental_
quota - Verification boundary for supplemental invocation quotas.
- threshold_
approval - tool_
outcome - Durable tool-return and post-return evaluation contracts.
- transport
- Length-prefixed canonical JSON transport.
- weights_
binding - Kernel-side model-card binding refusal.
Structs§
- Capital
Allocation Decision Artifact - Capital
Allocation Decision Finding - Capital
Allocation Decision Support Boundary - Capital
Allocation Instruction Draft - Capital
Book Event - Capital
Book Evidence Reference - Capital
Book Query - Capital
Book Report - Capital
Book Source - Capital
Book Summary - Capital
Book Support Boundary - Capital
Execution Authority Step - Capital
Execution Instruction Artifact - Capital
Execution Instruction Support Boundary - Capital
Execution Observation - Capital
Execution Rail - Capital
Execution Window - Child
Receipt Log - In-memory bounded ring of signed child-request receipts.
- Chio
Kernel - The Chio Runtime Kernel.
- Credit
Backtest Query - Credit
Backtest Report - Credit
Backtest Summary - Credit
Backtest Window - Credit
Bond Artifact - Credit
Bond Finding - Credit
Bond List Query - Credit
Bond List Report - Credit
Bond List Summary - Credit
Bond Prerequisites - Credit
Bond Report - Credit
Bond Row - Credit
Bond Support Boundary - Credit
Bond Terms - Credit
Bonded Execution Control Policy - Credit
Bonded Execution Evaluation - Credit
Bonded Execution Finding - Credit
Bonded Execution Simulation Delta - Credit
Bonded Execution Simulation Query - Credit
Bonded Execution Simulation Report - Credit
Bonded Execution Simulation Request - Credit
Bonded Execution Support Boundary - Credit
Certification State - Credit
Exposure Reservation Request - Credit
Facility Artifact - Credit
Facility Finding - Credit
Facility List Query - Credit
Facility List Report - Credit
Facility List Summary - Credit
Facility Prerequisites - Credit
Facility Report - Credit
Facility Row - Credit
Facility Support Boundary - Credit
Facility Terms - Credit
Loss Lifecycle Artifact - Credit
Loss Lifecycle Finding - Credit
Loss Lifecycle List Query - Credit
Loss Lifecycle List Report - Credit
Loss Lifecycle List Summary - Credit
Loss Lifecycle Query - Credit
Loss Lifecycle Report - Credit
Loss Lifecycle Row - Credit
Loss Lifecycle Summary - Credit
Loss Lifecycle Support Boundary - Credit
Provider Facility Snapshot - Credit
Provider Risk Package - Credit
Provider Risk Package Query - Credit
Provider Risk Package Support Boundary - Credit
Recent Loss Entry - Credit
Recent Loss History - Credit
Recent Loss Summary - Credit
Runtime Assurance State - Credit
Scorecard Anomaly - Credit
Scorecard Dimension - Credit
Scorecard Evidence Reference - Credit
Scorecard Probation Status - Credit
Scorecard Report - Credit
Scorecard Reputation Context - Credit
Scorecard Summary - Credit
Scorecard Support Boundary - Execution
Nonce - Signable body of a kernel-issued execution nonce.
- Exposure
Ledger Currency Position - Exposure
Ledger Decision Entry - Exposure
Ledger Evidence Reference - Exposure
Ledger Query - Exposure
Ledger Receipt Entry - Exposure
Ledger Report - Exposure
Ledger Summary - Exposure
Ledger Support Boundary - Fixed
Runtime Scope - Generic
Governance Authority Scope - Generic
Governance Case Artifact - Generic
Governance Case Evaluation - Generic
Governance Case Evaluation Request - Generic
Governance Case Issue Request - Generic
Governance Charter Artifact - Generic
Governance Charter Issue Request - Generic
Governance Evidence Reference - Generic
Governance Finding - Generic
Listing Artifact - Generic
Listing Boundary - Generic
Listing Compatibility Reference - Generic
Listing Divergence - Generic
Listing Freshness Window - Generic
Listing Query - Generic
Listing Replica Freshness - Generic
Listing Report - Generic
Listing Search Error - Generic
Listing Search Policy - Generic
Listing Search Response - Generic
Listing Search Result - Generic
Listing Subject - Generic
Listing Summary - Generic
Namespace Artifact - Generic
Namespace Ownership - Generic
Registry Publisher - Generic
Trust Activation Artifact - Generic
Trust Activation Eligibility - Generic
Trust Activation Evaluation - Generic
Trust Activation Evaluation Request - Generic
Trust Activation Finding - Generic
Trust Activation Issue Request - Generic
Trust Activation Review Context - Guard
Context - Context passed to guards during evaluation.
- Guard
Decision - A policy guard that the kernel evaluates before forwarding a tool call.
- HotPath
Deadline Config - Wall-clock budgets for the mediation hot path. All values are milliseconds.
0means “no deadline” (unbounded) for the opt-in guard and dispatch budgets, so a deployment that never sets one runs byte-for-byte as it did before deadlines existed. The receipt-append budget may not be0: an unbounded wedged-writer stall is never a valid posture, so it is rejected at load time and floor-clamped at read time as defense in depth. - Hybrid
Signing Config - Boot-time configuration for the kernel-side hybrid signing path.
- Kernel
Config - Configuration for the Chio Runtime Kernel.
- Liability
Auto Bind Decision Artifact - Liability
Auto Bind Finding - Liability
Bound Coverage Artifact - Liability
Claim Adjudication Artifact - Liability
Claim Dispute Artifact - Liability
Claim Evidence Reference - Liability
Claim Package Artifact - Liability
Claim Payout Instruction Artifact - Liability
Claim Payout Receipt Artifact - Liability
Claim Response Artifact - Liability
Claim Settlement Instruction Artifact - Liability
Claim Settlement Receipt Artifact - Liability
Claim Settlement Role Binding - Liability
Claim Settlement Role Topology - Liability
Claim Workflow Query - Liability
Claim Workflow Report - Liability
Claim Workflow Row - Liability
Claim Workflow Summary - Liability
Jurisdiction Policy - Liability
Market Workflow Query - Liability
Market Workflow Report - Liability
Market Workflow Row - Liability
Market Workflow Summary - Liability
Placement Artifact - Liability
Pricing Authority Artifact - Liability
Pricing Authority Envelope - Liability
Provider Artifact - Liability
Provider List Query - Liability
Provider List Report - Liability
Provider List Summary - Liability
Provider Policy Reference - Liability
Provider Provenance - Liability
Provider Report - Liability
Provider Resolution Query - Liability
Provider Resolution Report - Liability
Provider Row - Liability
Provider Support Boundary - Liability
Quote Request Artifact - Liability
Quote Response Artifact - Liability
Quote Terms - Memory
Budget Config - Per-process memory budget: bounded-structure capacities plus a process RSS soft ceiling. The soft ceiling is the in-process analog of the cgroup hard limit: the kernel sheds (Overloaded) before the OS OOM-kills it.
- Nonce
Binding - Fields that bind an execution nonce to one tool invocation.
- Open
Market Bond Requirement - Open
Market Economics Scope - Open
Market Evidence Reference - Open
Market FeeSchedule Artifact - Open
Market FeeSchedule Issue Request - Open
Market Finding - Open
Market Penalty Artifact - Open
Market Penalty Evaluation - Open
Market Penalty Evaluation Request - Open
Market Penalty Issue Request - Receipt
Log - In-memory bounded ring of signed receipts. Process-local inspection mirror; a durable receipt store is authoritative for id lookups.
- Runtime
Admission Context - Context passed to optional runtime admission hooks after capability, request matching, governed-admission, and guard checks pass, but before dispatch and federation co-signing side effects.
- Runtime
Admission Decision - Decision returned by a runtime admission hook.
- Signed
Execution Nonce - Kernel-signed execution nonce carried across agent/kernel transports.
- Signed
Hybrid Receipt - Receipt produced by the hybrid signing path together with the canonical byte buffer that was signed.
- Structured
Error Report - Underwriting
Appeal Create Request - Underwriting
Appeal Record - Underwriting
Appeal Resolve Request - Underwriting
Budget Recommendation - Underwriting
Certification Evidence - Underwriting
Compliance Evidence - Underwriting
Decision Artifact - Underwriting
Decision Finding - Underwriting
Decision List Report - Underwriting
Decision Policy - Underwriting
Decision Query - Underwriting
Decision Report - Underwriting
Decision Row - Underwriting
Decision Summary - Underwriting
Evidence Reference - Underwriting
Policy Input - Underwriting
Policy Input Query - Underwriting
Premium Quote - Underwriting
Receipt Evidence - Underwriting
Reputation Evidence - Underwriting
Risk Taxonomy - Underwriting
Runtime Assurance Evidence - Underwriting
Signal - Underwriting
Simulation Delta - Underwriting
Simulation Report - Underwriting
Simulation Request
Enums§
- Capital
Allocation Decision Outcome - Capital
Allocation Decision Reason Code - Capital
Book Event Kind - Capital
Book Evidence Kind - Capital
Book Role - Capital
Book Source Kind - Capital
Execution Instruction Action - Capital
Execution Intended State - Capital
Execution Rail Kind - Capital
Execution Reconciled State - Capital
Execution Role - Credit
Backtest Reason Code - Credit
Bond Disposition - Credit
Bond Lifecycle State - Credit
Bond Reason Code - Credit
Bonded Execution Decision - Credit
Bonded Execution Finding Code - Credit
Facility Capital Source - Credit
Facility Disposition - Credit
Facility Lifecycle State - Credit
Facility Reason Code - Credit
Loss Lifecycle Event Kind - Credit
Loss Lifecycle Reason Code - Credit
Reserve Control Appeal State - Credit
Reserve Control Execution State - Credit
Scorecard Anomaly Severity - Credit
Scorecard Band - Credit
Scorecard Confidence - Credit
Scorecard Dimension Kind - Credit
Scorecard Evidence Kind - Credit
Scorecard Reason Code - Exposure
Ledger Evidence Kind - Generic
Governance Case Kind - Generic
Governance Case State - Generic
Governance Effective State - Generic
Governance Evidence Kind - Generic
Governance Finding Code - Generic
Listing Actor Kind - Generic
Listing Freshness State - Generic
Listing Status - Generic
Namespace Lifecycle State - Generic
Registry Publisher Role - Generic
Trust Activation Disposition - Generic
Trust Activation Finding Code - Generic
Trust Admission Class - HotPath
Stage - A stage of the mediation hot path that can exceed its configured wall-clock budget. Carried in the deadline error and the structured report so operators can see which await ran long.
- Kernel
Build Error - Fail-closed kernel build error. Lets deadline config be validated at
construction time without making the infallible
ChioKernel::newfallible. - Kernel
Crypto Floor - Minimum cryptographic posture enforced by the kernel-side signing path.
- Kernel
Error - Errors that can occur during kernel operations.
- Kernel
Signing Backend Error - Errors raised when the kernel boot path constructs a receipt-signing
backend from a configured
crypto_floorand provisioned key material. - Liability
Auto Bind Disposition - Liability
Auto Bind Reason Code - Liability
Claim Adjudication Outcome - Liability
Claim Evidence Kind - Liability
Claim Payout Reconciliation State - Liability
Claim Response Disposition - Liability
Claim Settlement Kind - Liability
Claim Settlement Reconciliation State - Liability
Coverage Class - Liability
Evidence Requirement - Liability
Pricing Authority Envelope Kind - Liability
Provider Lifecycle State - Liability
Provider Type - Liability
Quote Disposition - Open
Market Abuse Class - Open
Market Bond Class - Open
Market Collateral Reference Kind - Open
Market Evidence Kind - Open
Market Finding Code - Open
Market Penalty Action - Open
Market Penalty Effective State - Open
Market Penalty State - Overload
Resource - Which bounded resource shed. Included in the receipt deny reason and the structured error report so operators can see which policy fired.
- Prometheus
Metric Kind - Prometheus metric family kind.
- Settlement
Runtime Config Error - Invalid settlement-runtime installation or mutation.
- Underwriting
Appeal Resolution - Underwriting
Appeal Status - Underwriting
Budget Action - Underwriting
Certification State - Underwriting
Decision Lifecycle State - Underwriting
Decision Outcome - Underwriting
Decision Reason Code - Underwriting
Evidence Kind - Underwriting
Premium State - Underwriting
Reason Code - Underwriting
Remediation - Underwriting
Review State - Underwriting
Risk Class
Constants§
- CAPITAL_
ALLOCATION_ DECISION_ ARTIFACT_ SCHEMA - CAPITAL_
BOOK_ REPORT_ SCHEMA - CAPITAL_
EXECUTION_ INSTRUCTION_ ARTIFACT_ SCHEMA - CREDIT_
BACKTEST_ REPORT_ SCHEMA - CREDIT_
BONDED_ EXECUTION_ SIMULATION_ REPORT_ SCHEMA - CREDIT_
BOND_ ARTIFACT_ SCHEMA - CREDIT_
BOND_ LIST_ REPORT_ SCHEMA - CREDIT_
BOND_ REPORT_ SCHEMA - CREDIT_
FACILITY_ ARTIFACT_ SCHEMA - CREDIT_
FACILITY_ LIST_ REPORT_ SCHEMA - CREDIT_
FACILITY_ REPORT_ SCHEMA - CREDIT_
LOSS_ LIFECYCLE_ ARTIFACT_ SCHEMA - CREDIT_
LOSS_ LIFECYCLE_ LIST_ REPORT_ SCHEMA - CREDIT_
LOSS_ LIFECYCLE_ REPORT_ SCHEMA - CREDIT_
PROVIDER_ RISK_ PACKAGE_ SCHEMA - CREDIT_
SCORECARD_ SCHEMA - DEFAULT_
CHECKPOINT_ BATCH_ SIZE - DEFAULT_
GENERIC_ LISTING_ REPORT_ MAX_ AGE_ SECS - DEFAULT_
MAX_ SIZE_ BYTES - DEFAULT_
MAX_ STREAM_ DURATION_ SECS - DEFAULT_
MAX_ STREAM_ TOTAL_ BYTES - DEFAULT_
RECEIPT_ APPEND_ BUDGET_ MS - DEFAULT_
RECEIPT_ WRITER_ POLL_ MS - DEFAULT_
RECEIPT_ WRITER_ STALL_ MS - DEFAULT_
RETENTION_ DAYS - EMERGENCY_
STOP_ DENY_ REASON - Deny reason surfaced by every evaluate path when the emergency kill
switch is engaged. Exposed as
pubso HTTP adapters and SDKs can pattern-match on the exact string without drifting. - EXPOSURE_
LEDGER_ SCHEMA - GENERIC_
GOVERNANCE_ CASE_ ARTIFACT_ SCHEMA - GENERIC_
GOVERNANCE_ CHARTER_ ARTIFACT_ SCHEMA - GENERIC_
LISTING_ ARTIFACT_ SCHEMA - GENERIC_
LISTING_ NETWORK_ SEARCH_ SCHEMA - GENERIC_
LISTING_ REPORT_ SCHEMA - GENERIC_
LISTING_ SEARCH_ ALGORITHM_ V1 - GENERIC_
NAMESPACE_ ARTIFACT_ SCHEMA - GENERIC_
TRUST_ ACTIVATION_ ARTIFACT_ SCHEMA - LIABILITY_
AUTO_ BIND_ DECISION_ ARTIFACT_ SCHEMA - LIABILITY_
BOUND_ COVERAGE_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ ADJUDICATION_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ DISPUTE_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ PACKAGE_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ PAYOUT_ INSTRUCTION_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ PAYOUT_ RECEIPT_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ RESPONSE_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ SETTLEMENT_ INSTRUCTION_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ SETTLEMENT_ RECEIPT_ ARTIFACT_ SCHEMA - LIABILITY_
CLAIM_ WORKFLOW_ REPORT_ SCHEMA - LIABILITY_
MARKET_ WORKFLOW_ REPORT_ SCHEMA - LIABILITY_
PLACEMENT_ ARTIFACT_ SCHEMA - LIABILITY_
PRICING_ AUTHORITY_ ARTIFACT_ SCHEMA - LIABILITY_
PROVIDER_ ARTIFACT_ SCHEMA - LIABILITY_
PROVIDER_ LIST_ REPORT_ SCHEMA - LIABILITY_
PROVIDER_ RESOLUTION_ REPORT_ SCHEMA - LIABILITY_
QUOTE_ REQUEST_ ARTIFACT_ SCHEMA - LIABILITY_
QUOTE_ RESPONSE_ ARTIFACT_ SCHEMA - MAX_
CREDIT_ BACKTEST_ WINDOW_ LIMIT - MAX_
CREDIT_ BOND_ LIST_ LIMIT - MAX_
CREDIT_ FACILITY_ LIST_ LIMIT - MAX_
CREDIT_ LOSS_ LIFECYCLE_ LIST_ LIMIT - MAX_
CREDIT_ PROVIDER_ LOSS_ LIMIT - MAX_
EXPOSURE_ LEDGER_ DECISION_ LIMIT - MAX_
EXPOSURE_ LEDGER_ RECEIPT_ LIMIT - MAX_
GENERIC_ LISTING_ LIMIT - MAX_
LIABILITY_ CLAIM_ WORKFLOW_ LIMIT - MAX_
LIABILITY_ MARKET_ WORKFLOW_ LIMIT - MAX_
LIABILITY_ PROVIDER_ LIST_ LIMIT - MAX_
UNDERWRITING_ DECISION_ LIMIT - MAX_
UNDERWRITING_ RECEIPT_ LIMIT - METRIC_
CHIO_ OTEL_ INGRESS_ DROP_ TOTAL - METRIC_
CHIO_ OTEL_ SINK_ DROP_ TOTAL - METRIC_
CHIO_ SIGNING_ QUEUE_ BLOCK_ TOTAL - Prometheus counter name emitted when the bounded receipt-signing channel blocks under backpressure.
- MIN_
RECEIPT_ APPEND_ BUDGET_ MS - OPEN_
MARKET_ FEE_ SCHEDULE_ ARTIFACT_ SCHEMA - OPEN_
MARKET_ PENALTY_ ARTIFACT_ SCHEMA - SIGNING_
CHANNEL_ DEFAULT_ CAPACITY - Default bounded capacity for the kernel’s mpsc-backed signing-task channel. Re-exported so integration tests can assert against the configured value without reaching into crate-private module paths.
- UNDERWRITING_
APPEAL_ SCHEMA - UNDERWRITING_
COMPLIANCE_ EVIDENCE_ SCHEMA - UNDERWRITING_
DECISION_ ARTIFACT_ SCHEMA - UNDERWRITING_
DECISION_ POLICY_ SCHEMA - UNDERWRITING_
DECISION_ POLICY_ VERSION - UNDERWRITING_
DECISION_ REPORT_ SCHEMA - UNDERWRITING_
POLICY_ INPUT_ SCHEMA - UNDERWRITING_
RISK_ TAXONOMY_ VERSION - UNDERWRITING_
SIMULATION_ REPORT_ SCHEMA
Traits§
- Guard
- Prompt
Provider - Trait representing a prompt provider.
- Resource
Provider - Trait representing a resource provider.
- Runtime
Admission Hook - Optional pre-dispatch admission hook for product-specific runtime gates.
- Tool
Evaluator - The four logical phases of a tool-call evaluation, surfaced as an async-capable trait so each phase can be replaced with an async-native implementation without re-shaping the public surface.
Functions§
- aggregate_
generic_ listing_ reports - build_
generic_ governance_ case_ artifact - build_
generic_ governance_ charter_ artifact - build_
generic_ trust_ activation_ artifact - build_
open_ market_ fee_ schedule_ artifact - build_
open_ market_ penalty_ artifact - build_
open_ market_ penalty_ artifact_ with_ trusted_ signers - build_
underwriting_ decision_ artifact - capability_
matches_ prompt_ request - capability_
matches_ request - capability_
matches_ request_ with_ model_ metadata - capability_
matches_ resource_ pattern - capability_
matches_ resource_ request - capability_
matches_ resource_ subscription - capability_
request_ requires_ dpop - Return whether any grant matching this tool request requires DPoP.
- capability_
request_ requires_ dpop_ with_ model_ metadata - Return whether any grant matching this model-aware tool request requires DPoP.
- ensure_
capital_ execution_ custodian_ authority - ensure_
capital_ execution_ owner_ authority - ensure_
generic_ listing_ namespace_ consistency - evaluate_
generic_ governance_ case - evaluate_
generic_ trust_ activation - evaluate_
open_ market_ penalty - evaluate_
open_ market_ penalty_ with_ trusted_ signers - evaluate_
underwriting_ policy_ input - fixed_
runtime_ unix_ secs_ for_ current_ thread - kernel_
signing_ backend - Construct the kernel-side receipt signing backend without the
pqfeature. - normalize_
namespace - scope_
fixed_ runtime_ for_ current_ thread - sign_
receipt_ body_ hybrid_ canonical - Sign a
ChioReceiptBodythrough a hybrid signing backend and return both the signedChioReceiptand the [SharedCanonicalBytes] that were signed. - sign_
receipt_ body_ with_ backend - Sign an already-assembled
ChioReceiptBodywith an arbitrary [SigningBackend] (classical, hybrid, or PQ), recomputingcontent_hashinside the trust boundary (WYSIWYS). - validate_
capital_ execution_ envelope
Type Aliases§
- AgentId
- Capability
Id - A string-typed capability identifier.
- Server
Id - A string-typed server identifier.
- Signed
Capital Allocation Decision - Signed
Capital Book Report - Signed
Capital Execution Instruction - Signed
Credit Bond - Signed
Credit Facility - Signed
Credit Loss Lifecycle - Signed
Credit Provider Risk Package - Signed
Credit Scorecard Report - Signed
Exposure Ledger Report - Signed
Generic Governance Case - Signed
Generic Governance Charter - Signed
Generic Listing - Signed
Generic Namespace - Signed
Generic Trust Activation - Signed
Liability Auto Bind Decision - Signed
Liability Bound Coverage - Signed
Liability Claim Adjudication - Signed
Liability Claim Dispute - Signed
Liability Claim Package - Signed
Liability Claim Payout Instruction - Signed
Liability Claim Payout Receipt - Signed
Liability Claim Response - Signed
Liability Claim Settlement Instruction - Signed
Liability Claim Settlement Receipt - Signed
Liability Placement - Signed
Liability Pricing Authority - Signed
Liability Provider - Signed
Liability Quote Request - Signed
Liability Quote Response - Signed
Open Market FeeSchedule - Signed
Open Market Penalty - Signed
Underwriting Decision - Signed
Underwriting Policy Input