Module host_service 

The target side: a node’s workload-host service (ADR-099 section 7).

It verifies each signed request, then for place / load:

1. picks the runtime adapter for the chosen route (native, container, …); no adapter is an admission refusal;
2. fetches the package before loading, over the same connection, with the artifact piece protocol (card 11) and verifies its signatures against this node’s own trust anchors;
3. rebuilds the workload from the fetched bytes and hands it to the adapter through WorkloadHost, whose admission self-check (binary arch, OS, runtime) runs before governance and load (card 09).

Every refusal is chained as workload.refuse (source HOST_CHAIN_SOURCE); a placement is chained as workload.place. Unknown workload.* methods go to the governance gate, which denies and chains them (default deny, ADR-099 section 4).

Structs

CtlConfig

Place-time configuration sent with place / load.

InstanceBody

Body of the instance verbs.

PlaceBody

Body of place / load.

WorkloadHostService

A node’s workload-host.

Constants

HOST_CHAIN_SOURCE

Chain source for target-side placement records.

Type Aliases

FactsSource

Fresh signed facts on demand (a daemon re-probes before the TTL ends).