chio-kernel 0.1.2

Chio runtime kernel: capability validation, guard evaluation, receipt signing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

// The kernel denies at dispatch when the revocation store is ephemeral and the
// operator has not opted in, mirroring the receipt-persistence admission gate.

#[test]
fn in_memory_revocation_store_is_ephemeral_by_default() {
    let store = crate::InMemoryRevocationStore::new();
    assert!(crate::RevocationStore::is_ephemeral(&store));
}

#[test]
fn revocation_gate_denies_ephemeral_store_without_optin() {
    let mut config = make_config();
    config.allow_ephemeral_revocation_store = false;
    let kernel = make_kernel(config);
    // ChioKernel::new installs an in-memory (ephemeral) revocation store.
    assert!(kernel.ensure_revocation_durability_ready().is_err());
}

#[test]
fn revocation_gate_allows_ephemeral_store_with_optin() {
    let mut config = make_config();
    config.allow_ephemeral_revocation_store = true;
    let kernel = make_kernel(config);
    assert!(kernel.ensure_revocation_durability_ready().is_ok());
}

#[test]
fn revocation_gate_allows_an_installed_view_without_a_durable_store() {
    let mut config = make_config();
    // No ephemeral opt-in, and only the default in-memory per-row store.
    config.allow_ephemeral_revocation_store = false;
    let mut kernel = make_kernel(config);
    // A federation/oracle revocation view is a durable remote source consulted on
    // every delegated dispatch, so installing one satisfies the gate without also
    // wiring an otherwise-unused durable per-row store.
    kernel.set_revocation_view(std::sync::Arc::new(
        chio_kernel_core::RevocationView::new(),
    ));
    assert!(kernel.ensure_revocation_durability_ready().is_ok());
}