Expand description
Signed packages over the artifact exchange (mesh-placement-11).
Governance for distribution (ADR-099 section 6): a node serves only
content listed by a signed workload manifest (wave-1 workload_pkg)
that verified on that node.
- The origin seeds a package with
ArtifactExchange::seed_package: the manifest’s signatures are checked first, then every listed file is streamed into pieces and must match its pinned size and BLAKE3. - A fetcher uses
ArtifactExchange::fetch_package: it fetches the manifest by content hash, checks its signatures before fetching any file, fetches each file by its pinned hash (piece checks plus a whole-content check). Once the manifest verifies, this node may serve each listed file that it holds verified (pieces assembled to the pinned hash here); a peer’s descriptor alone never makes content servable.
Structs§
- Exchanged
Package - A package this node can serve.
Enums§
- Package
Exchange Error - Why a package could not be seeded or fetched.