Struct Airlock 

pub struct Airlock { /* private fields */ }

The Airlock — zero plaintext lifetime processing

All data processing happens within a closure. Plaintext exists ONLY inside the closure scope. The airlock:

1. Allocates mlock’d memory (never swapped to disk)
2. Decrypts data into the locked buffer
3. Runs the processing closure
4. Captures the encrypted output
5. Zeroizes all plaintext memory on exit

Implementations

impl Airlock

pub fn new(config: AirlockConfig) -> Self

pub fn with_defaults() -> Self

pub fn process<F, R>( &self, input: &[u8], actor: &str, jis_level: u8, f: F, ) -> CortexResult<(R, AirlockSession)>

where F: FnOnce(&[u8]) -> CortexResult<R>,

Process data within the airlock. The closure receives plaintext and must return the processed result. All plaintext is wiped after the closure exits.

Returns: (processed_output, audit_session)

pub fn process_chunks<F, R>( &self, chunks: &[(Vec<u8>, u8)], actor: &str, actor_jis_level: u8, f: F, ) -> CortexResult<(Vec<R>, AirlockSession)>

where F: Fn(&[u8]) -> CortexResult<R>,

Process multiple chunks, filtering by JIS level. Returns only chunks the actor is authorized to access.

pub fn audit_token(&self, session: &AirlockSession) -> TibetToken

Generate a TIBET audit token from an airlock session