Skip to main content

Module mesh_artifact_pkg

Module mesh_artifact_pkg 

Source
Expand description

Signed packages over the artifact exchange (mesh-placement-11).

Governance for distribution (ADR-099 section 6): a node serves only content listed by a signed workload manifest (wave-1 workload_pkg) that verified on that node.

  • The origin seeds a package with ArtifactExchange::seed_package: the manifest’s signatures are checked first, then every listed file is streamed into pieces and must match its pinned size and BLAKE3.
  • A fetcher uses ArtifactExchange::fetch_package: it fetches the manifest by content hash, checks its signatures before fetching any file, fetches each file by its pinned hash (piece checks plus a whole-content check). Once the manifest verifies, this node may serve each listed file that it holds verified (pieces assembled to the pinned hash here); a peer’s descriptor alone never makes content servable.

Structs§

ExchangedPackage
A package this node can serve.

Enums§

PackageExchangeError
Why a package could not be seeded or fetched.