Skip to main content

Crate chio_kernel

Crate chio_kernel 

Source
Expand description

Chio Runtime Kernel.

The kernel is the trusted computing base (TCB) of the Chio protocol. It sits between the untrusted agent and the sandboxed tool servers, mediating every tool invocation.

The kernel’s responsibilities:

  1. Capability validation – verify signatures, time bounds, revocation status, scope matching, and invocation budgets.
  2. Guard evaluation – run policy guards against the tool call before forwarding it.
  3. Receipt signing – produce a signed receipt for every decision (allow or deny) and append it to the receipt log.
  4. Tool dispatch – forward validated requests to the appropriate tool server over an authenticated channel.

The kernel is architecturally invisible to the agent. The agent communicates through an anonymous pipe or Unix domain socket and never learns the kernel’s PID, address, or signing key.

Re-exports§

pub use approval::compute_parameter_hash;
pub use approval::resume_with_decision;
pub use approval::ApprovalChannel;
pub use approval::ApprovalContext;
pub use approval::ApprovalDecision;
pub use approval::ApprovalFilter;
pub use approval::ApprovalGuard;
pub use approval::ApprovalOutcome;
pub use approval::ApprovalRequest;
pub use approval::ApprovalStore;
pub use approval::ApprovalStoreError;
pub use approval::ApprovalToken;
pub use approval::BatchApproval;
pub use approval::BatchApprovalStore;
pub use approval::ChannelError;
pub use approval::ChannelHandle;
pub use approval::HitlVerdict;
pub use approval::InMemoryApprovalStore;
pub use approval::InMemoryBatchApprovalStore;
pub use approval::ResolvedApproval;
pub use approval::MAX_APPROVAL_TTL_SECS;
pub use approval_channels::RecordingChannel;
pub use approval_channels::WebhookChannel;
pub use approval_channels::WebhookPayload;
pub use authority::AuthoritySnapshot;
pub use authority::AuthorityStatus;
pub use authority::AuthorityStoreError;
pub use authority::AuthorityTrustedKeySnapshot;
pub use authority::CapabilityAuthority;
pub use authority::LocalCapabilityAuthority;
pub use budget_store::BudgetStore;
pub use budget_store::BudgetStoreError;
pub use budget_store::BudgetUsageRecord;
pub use budget_store::InMemoryBudgetStore;
pub use capability_lineage::CapabilityLineageError;
pub use capability_lineage::CapabilitySnapshot;
pub use capability_lineage::StoredCapabilitySnapshot;
pub use checkpoint::build_checkpoint;
pub use checkpoint::build_checkpoint_with_previous;
pub use checkpoint::build_inclusion_proof;
pub use checkpoint::checkpoint_body_sha256;
pub use checkpoint::is_supported_checkpoint_schema;
pub use checkpoint::verify_checkpoint_continuity;
pub use checkpoint::verify_checkpoint_signature;
pub use checkpoint::CheckpointError;
pub use checkpoint::KernelCheckpoint;
pub use checkpoint::KernelCheckpointBody;
pub use checkpoint::ReceiptInclusionProof;
pub use checkpoint::CHECKPOINT_SCHEMA;
pub use compliance_score::compliance_factor_breakdown;
pub use compliance_score::compliance_score;
pub use compliance_score::ComplianceFactor;
pub use compliance_score::ComplianceFactorBreakdown;
pub use compliance_score::ComplianceScore;
pub use compliance_score::ComplianceScoreConfig;
pub use compliance_score::ComplianceScoreInputs;
pub use compliance_score::COMPLIANCE_SCORE_MAX;
pub use compliance_score::DEFAULT_ATTESTATION_STALENESS_SECS;
pub use compliance_score::WEIGHT_ATTESTATION_FRESHNESS;
pub use compliance_score::WEIGHT_DENY_RATE;
pub use compliance_score::WEIGHT_POLICY_COVERAGE;
pub use compliance_score::WEIGHT_REVOCATION;
pub use compliance_score::WEIGHT_VELOCITY_ANOMALY;
pub use cost_attribution::CostAttributionChainHop;
pub use cost_attribution::CostAttributionQuery;
pub use cost_attribution::CostAttributionReceiptRow;
pub use cost_attribution::CostAttributionReport;
pub use cost_attribution::CostAttributionSummary;
pub use cost_attribution::LeafCostAttributionRow;
pub use cost_attribution::RootCostAttributionRow;
pub use cost_attribution::MAX_COST_ATTRIBUTION_LIMIT;
pub use dpop::is_supported_dpop_schema;
pub use dpop::verify_dpop_proof;
pub use dpop::DpopConfig;
pub use dpop::DpopNonceStore;
pub use dpop::DpopProof;
pub use dpop::DpopProofBody;
pub use dpop::DPOP_SCHEMA;
pub use evidence_export::EvidenceChildReceiptRecord;
pub use evidence_export::EvidenceChildReceiptScope;
pub use evidence_export::EvidenceExportBundle;
pub use evidence_export::EvidenceExportError;
pub use evidence_export::EvidenceExportQuery;
pub use evidence_export::EvidenceRetentionMetadata;
pub use evidence_export::EvidenceToolReceiptRecord;
pub use evidence_export::EvidenceUncheckpointedReceipt;
pub use execution_nonce::is_supported_execution_nonce_schema;
pub use execution_nonce::mint_execution_nonce;
pub use execution_nonce::verify_execution_nonce;
pub use execution_nonce::ExecutionNonce;
pub use execution_nonce::ExecutionNonceConfig;
pub use execution_nonce::ExecutionNonceError;
pub use execution_nonce::ExecutionNonceStore;
pub use execution_nonce::InMemoryExecutionNonceStore;
pub use execution_nonce::NonceBinding;
pub use execution_nonce::SignedExecutionNonce;
pub use execution_nonce::DEFAULT_EXECUTION_NONCE_STORE_CAPACITY;
pub use execution_nonce::DEFAULT_EXECUTION_NONCE_TTL_SECS;
pub use execution_nonce::EXECUTION_NONCE_SCHEMA;
pub use memory_provenance::classify_memory_action;
pub use memory_provenance::next_entry_id as next_memory_provenance_entry_id;
pub use memory_provenance::recompute_entry_hash as recompute_memory_provenance_entry_hash;
pub use memory_provenance::InMemoryMemoryProvenanceStore;
pub use memory_provenance::MemoryActionKind;
pub use memory_provenance::MemoryProvenanceAppend;
pub use memory_provenance::MemoryProvenanceEntry;
pub use memory_provenance::MemoryProvenanceError;
pub use memory_provenance::MemoryProvenanceStore;
pub use memory_provenance::ProvenanceVerification;
pub use memory_provenance::UnverifiedReason;
pub use memory_provenance::MEMORY_PROVENANCE_ENTRY_SCHEMA;
pub use memory_provenance::MEMORY_PROVENANCE_GENESIS_PREV_HASH;
pub use operator_report::behavioral_anomaly_score;
pub use operator_report::BehavioralAnomalyScore;
pub use operator_report::EmaBaselineState;
pub use operator_report::AuthorizationContextReport;
pub use operator_report::AuthorizationContextRow;
pub use operator_report::AuthorizationContextSenderConstraint;
pub use operator_report::AuthorizationContextSummary;
pub use operator_report::BehavioralFeedDecisionSummary;
pub use operator_report::BehavioralFeedGovernedActionSummary;
pub use operator_report::BehavioralFeedMeteredBillingRow;
pub use operator_report::BehavioralFeedMeteredBillingSummary;
pub use operator_report::BehavioralFeedPrivacyBoundary;
pub use operator_report::BehavioralFeedQuery;
pub use operator_report::BehavioralFeedReceiptRow;
pub use operator_report::BehavioralFeedReceiptSelection;
pub use operator_report::BehavioralFeedReport;
pub use operator_report::BehavioralFeedReputationSummary;
pub use operator_report::BehavioralFeedSettlementSummary;
pub use operator_report::BudgetDimensionProfile;
pub use operator_report::BudgetDimensionUsage;
pub use operator_report::BudgetUtilizationReport;
pub use operator_report::BudgetUtilizationRow;
pub use operator_report::BudgetUtilizationSummary;
pub use operator_report::ChioOAuthArtifactBoundary;
pub use operator_report::ChioOAuthAuthorizationDiscoveryMetadata;
pub use operator_report::ChioOAuthAuthorizationExampleMapping;
pub use operator_report::ChioOAuthAuthorizationMetadataReport;
pub use operator_report::ChioOAuthAuthorizationProfile;
pub use operator_report::ChioOAuthAuthorizationReviewPack;
pub use operator_report::ChioOAuthAuthorizationReviewPackRecord;
pub use operator_report::ChioOAuthAuthorizationReviewPackSummary;
pub use operator_report::ChioOAuthAuthorizationSupportBoundary;
pub use operator_report::ChioOAuthRequestTimeContract;
pub use operator_report::ChioOAuthResourceBinding;
pub use operator_report::ChioOAuthSenderConstraintProfile;
pub use operator_report::ComplianceReport;
pub use operator_report::EconomicCompletionFlowReport;
pub use operator_report::EconomicCompletionFlowSummary;
pub use operator_report::EconomicReceiptMeteringProjection;
pub use operator_report::EconomicReceiptProjectionReport;
pub use operator_report::EconomicReceiptProjectionRow;
pub use operator_report::EconomicReceiptProjectionSummary;
pub use operator_report::EconomicReceiptSettlementProjection;
pub use operator_report::GovernedAuthorizationCommerceDetail;
pub use operator_report::GovernedAuthorizationDetail;
pub use operator_report::GovernedAuthorizationMeteredBillingDetail;
pub use operator_report::GovernedAuthorizationTransactionContext;
pub use operator_report::MeteredBillingEvidenceRecord;
pub use operator_report::MeteredBillingReconciliationReport;
pub use operator_report::MeteredBillingReconciliationRow;
pub use operator_report::MeteredBillingReconciliationState;
pub use operator_report::MeteredBillingReconciliationSummary;
pub use operator_report::OperatorReport;
pub use operator_report::OperatorReportQuery;
pub use operator_report::SettlementReconciliationReport;
pub use operator_report::SettlementReconciliationRow;
pub use operator_report::SettlementReconciliationState;
pub use operator_report::SettlementReconciliationSummary;
pub use operator_report::SharedEvidenceQuery;
pub use operator_report::SharedEvidenceReferenceReport;
pub use operator_report::SharedEvidenceReferenceRow;
pub use operator_report::SharedEvidenceReferenceSummary;
pub use operator_report::SignedBehavioralFeed;
pub use operator_report::BEHAVIORAL_FEED_SCHEMA;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_COMMERCE_DETAIL_TYPE;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_CONTEXT_REPORT_SCHEMA;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_METADATA_SCHEMA;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_METERED_BILLING_DETAIL_TYPE;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_PROFILE_ID;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_PROFILE_SCHEMA;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_REVIEW_PACK_SCHEMA;
pub use operator_report::CHIO_OAUTH_AUTHORIZATION_TOOL_DETAIL_TYPE;
pub use operator_report::CHIO_OAUTH_REQUEST_TIME_AUTHORIZATION_DETAILS_CLAIM;
pub use operator_report::CHIO_OAUTH_REQUEST_TIME_AUTHORIZATION_DETAILS_PARAMETER;
pub use operator_report::CHIO_OAUTH_REQUEST_TIME_TRANSACTION_CONTEXT_CLAIM;
pub use operator_report::CHIO_OAUTH_REQUEST_TIME_TRANSACTION_CONTEXT_PARAMETER;
pub use operator_report::CHIO_OAUTH_SENDER_BINDING_CAPABILITY_SUBJECT;
pub use operator_report::CHIO_OAUTH_SENDER_CONSTRAINT_SCHEMA;
pub use operator_report::CHIO_OAUTH_SENDER_PROOF_CHIO_DPOP;
pub use operator_report::ECONOMIC_COMPLETION_FLOW_SCHEMA;
pub use operator_report::MAX_AUTHORIZATION_CONTEXT_LIMIT;
pub use operator_report::MAX_BEHAVIORAL_FEED_RECEIPT_LIMIT;
pub use operator_report::MAX_METERED_BILLING_LIMIT;
pub use operator_report::MAX_OPERATOR_BUDGET_LIMIT;
pub use operator_report::MAX_SETTLEMENT_BACKLOG_LIMIT;
pub use operator_report::MAX_SHARED_EVIDENCE_LIMIT;
pub use payment::AcpPaymentAdapter;
pub use payment::CommercePaymentContext;
pub use payment::GovernedPaymentContext;
pub use payment::PaymentAdapter;
pub use payment::PaymentAuthorization;
pub use payment::PaymentAuthorizeRequest;
pub use payment::PaymentError;
pub use payment::PaymentResult;
pub use payment::RailSettlementStatus;
pub use payment::ReceiptSettlement;
pub use payment::X402PaymentAdapter;
pub use post_invocation::PipelineOutcome;
pub use post_invocation::PostInvocationContext;
pub use post_invocation::PostInvocationHook;
pub use post_invocation::PostInvocationPipeline;
pub use post_invocation::PostInvocationVerdict;
pub use receipt_analytics::AgentAnalyticsRow;
pub use receipt_analytics::AnalyticsTimeBucket;
pub use receipt_analytics::ReceiptAnalyticsMetrics;
pub use receipt_analytics::ReceiptAnalyticsQuery;
pub use receipt_analytics::ReceiptAnalyticsResponse;
pub use receipt_analytics::TimeAnalyticsRow;
pub use receipt_analytics::ToolAnalyticsRow;
pub use receipt_analytics::MAX_ANALYTICS_GROUP_LIMIT;
pub use receipt_query::ReceiptQuery;
pub use receipt_query::ReceiptQueryResult;
pub use receipt_query::MAX_QUERY_LIMIT;
pub use receipt_store::FederatedEvidenceShareImport;
pub use receipt_store::FederatedEvidenceShareSummary;
pub use receipt_store::ReceiptStore;
pub use receipt_store::ReceiptStoreError;
pub use receipt_store::RetentionConfig;
pub use receipt_store::StoredChildReceipt;
pub use receipt_store::StoredToolReceipt;
pub use revocation_runtime::InMemoryRevocationStore;
pub use revocation_runtime::RevocationStore;
pub use revocation_store::RevocationRecord;
pub use revocation_store::RevocationStoreError;
pub use runtime::NestedFlowBridge;
pub use runtime::NestedFlowClient;
pub use runtime::ToolCallChunk;
pub use runtime::ToolCallOutput;
pub use runtime::ToolCallRequest;
pub use runtime::ToolCallResponse;
pub use runtime::ToolCallStream;
pub use runtime::ToolInvocationCost;
pub use runtime::ToolServerConnection;
pub use runtime::ToolServerEvent;
pub use runtime::ToolServerOutput;
pub use runtime::ToolServerStreamResult;
pub use runtime::Verdict;
pub use session::InflightRegistry;
pub use session::InflightRequest;
pub use session::LateSessionEvent;
pub use session::PeerCapabilities;
pub use session::Session;
pub use session::SessionError;
pub use session::SessionOperationResponse;
pub use session::SessionState;
pub use session::SubscriptionRegistry;
pub use session::TerminalRegistry;

Modules§

approval
Phase 3.4-3.6 human-in-the-loop (HITL) primitives.
approval_channels
Phase 3.6 approval channels.
authority
budget_store
capability_lineage
Capability lineage index for Chio kernel.
checkpoint
Merkle-committed receipt batch checkpointing.
compliance_score
Phase 19.1 – compliance scoring on top of ComplianceReport.
cost_attribution
dpop
DPoP (Demonstration of Proof-of-Possession) for Chio tool invocations.
evidence_export
execution_nonce
Phase 1.1: Execution Nonces (TOCTOU fix).
memory_provenance
Phase 18.2: Memory entry provenance.
operator_report
payment
post_invocation
Post-invocation hook pipeline executed after a tool returns output.
receipt_analytics
receipt_query
receipt_store
revocation_runtime
revocation_store
runtime
session
transport
Length-prefixed canonical JSON transport.

Structs§

CapitalAllocationDecisionArtifact
CapitalAllocationDecisionFinding
CapitalAllocationDecisionSupportBoundary
CapitalAllocationInstructionDraft
CapitalBookEvent
CapitalBookEvidenceReference
CapitalBookQuery
CapitalBookReport
CapitalBookSource
CapitalBookSummary
CapitalBookSupportBoundary
CapitalExecutionAuthorityStep
CapitalExecutionInstructionArtifact
CapitalExecutionInstructionSupportBoundary
CapitalExecutionObservation
CapitalExecutionRail
CapitalExecutionWindow
ChildReceiptLog
In-memory append-only log of signed child-request receipts.
ChioKernel
The Chio Runtime Kernel.
CreditBacktestQuery
CreditBacktestReport
CreditBacktestSummary
CreditBacktestWindow
CreditBondArtifact
CreditBondFinding
CreditBondListQuery
CreditBondListReport
CreditBondListSummary
CreditBondPrerequisites
CreditBondReport
CreditBondRow
CreditBondSupportBoundary
CreditBondTerms
CreditBondedExecutionControlPolicy
CreditBondedExecutionEvaluation
CreditBondedExecutionFinding
CreditBondedExecutionSimulationDelta
CreditBondedExecutionSimulationQuery
CreditBondedExecutionSimulationReport
CreditBondedExecutionSimulationRequest
CreditBondedExecutionSupportBoundary
CreditCertificationState
CreditFacilityArtifact
CreditFacilityFinding
CreditFacilityListQuery
CreditFacilityListReport
CreditFacilityListSummary
CreditFacilityPrerequisites
CreditFacilityReport
CreditFacilityRow
CreditFacilitySupportBoundary
CreditFacilityTerms
CreditLossLifecycleArtifact
CreditLossLifecycleFinding
CreditLossLifecycleListQuery
CreditLossLifecycleListReport
CreditLossLifecycleListSummary
CreditLossLifecycleQuery
CreditLossLifecycleReport
CreditLossLifecycleRow
CreditLossLifecycleSummary
CreditLossLifecycleSupportBoundary
CreditProviderFacilitySnapshot
CreditProviderRiskPackage
CreditProviderRiskPackageQuery
CreditProviderRiskPackageSupportBoundary
CreditRecentLossEntry
CreditRecentLossHistory
CreditRecentLossSummary
CreditRuntimeAssuranceState
CreditScorecardAnomaly
CreditScorecardDimension
CreditScorecardEvidenceReference
CreditScorecardProbationStatus
CreditScorecardReport
CreditScorecardReputationContext
CreditScorecardSummary
CreditScorecardSupportBoundary
ExposureLedgerCurrencyPosition
ExposureLedgerDecisionEntry
ExposureLedgerEvidenceReference
ExposureLedgerQuery
ExposureLedgerReceiptEntry
ExposureLedgerReport
ExposureLedgerSummary
ExposureLedgerSupportBoundary
GenericGovernanceAuthorityScope
GenericGovernanceCaseArtifact
GenericGovernanceCaseEvaluation
GenericGovernanceCaseEvaluationRequest
GenericGovernanceCaseIssueRequest
GenericGovernanceCharterArtifact
GenericGovernanceCharterIssueRequest
GenericGovernanceEvidenceReference
GenericGovernanceFinding
GenericListingArtifact
GenericListingBoundary
GenericListingCompatibilityReference
GenericListingDivergence
GenericListingFreshnessWindow
GenericListingQuery
GenericListingReplicaFreshness
GenericListingReport
GenericListingSearchError
GenericListingSearchPolicy
GenericListingSearchResponse
GenericListingSearchResult
GenericListingSubject
GenericListingSummary
GenericNamespaceArtifact
GenericNamespaceOwnership
GenericRegistryPublisher
GenericTrustActivationArtifact
GenericTrustActivationEligibility
GenericTrustActivationEvaluation
GenericTrustActivationEvaluationRequest
GenericTrustActivationFinding
GenericTrustActivationIssueRequest
GenericTrustActivationReviewContext
GuardContext
Context passed to guards during evaluation.
KernelConfig
Configuration for the Chio Runtime Kernel.
LiabilityAutoBindDecisionArtifact
LiabilityAutoBindFinding
LiabilityBoundCoverageArtifact
LiabilityClaimAdjudicationArtifact
LiabilityClaimDisputeArtifact
LiabilityClaimEvidenceReference
LiabilityClaimPackageArtifact
LiabilityClaimPayoutInstructionArtifact
LiabilityClaimPayoutReceiptArtifact
LiabilityClaimResponseArtifact
LiabilityClaimSettlementInstructionArtifact
LiabilityClaimSettlementReceiptArtifact
LiabilityClaimSettlementRoleBinding
LiabilityClaimSettlementRoleTopology
LiabilityClaimWorkflowQuery
LiabilityClaimWorkflowReport
LiabilityClaimWorkflowRow
LiabilityClaimWorkflowSummary
LiabilityJurisdictionPolicy
LiabilityMarketWorkflowQuery
LiabilityMarketWorkflowReport
LiabilityMarketWorkflowRow
LiabilityMarketWorkflowSummary
LiabilityPlacementArtifact
LiabilityPricingAuthorityArtifact
LiabilityPricingAuthorityEnvelope
LiabilityProviderArtifact
LiabilityProviderListQuery
LiabilityProviderListReport
LiabilityProviderListSummary
LiabilityProviderPolicyReference
LiabilityProviderProvenance
LiabilityProviderReport
LiabilityProviderResolutionQuery
LiabilityProviderResolutionReport
LiabilityProviderRow
LiabilityProviderSupportBoundary
LiabilityQuoteRequestArtifact
LiabilityQuoteResponseArtifact
LiabilityQuoteTerms
OpenMarketBondRequirement
OpenMarketEconomicsScope
OpenMarketEvidenceReference
OpenMarketFeeScheduleArtifact
OpenMarketFeeScheduleIssueRequest
OpenMarketFinding
OpenMarketPenaltyArtifact
OpenMarketPenaltyEvaluation
OpenMarketPenaltyEvaluationRequest
OpenMarketPenaltyIssueRequest
ReceiptLog
In-memory append-only log of signed receipts.
StructuredErrorReport
UnderwritingAppealCreateRequest
UnderwritingAppealRecord
UnderwritingAppealResolveRequest
UnderwritingBudgetRecommendation
UnderwritingCertificationEvidence
UnderwritingComplianceEvidence
UnderwritingDecisionArtifact
UnderwritingDecisionFinding
UnderwritingDecisionListReport
UnderwritingDecisionPolicy
UnderwritingDecisionQuery
UnderwritingDecisionReport
UnderwritingDecisionRow
UnderwritingDecisionSummary
UnderwritingEvidenceReference
UnderwritingPolicyInput
UnderwritingPolicyInputQuery
UnderwritingPremiumQuote
UnderwritingReceiptEvidence
UnderwritingReputationEvidence
UnderwritingRiskTaxonomy
UnderwritingRuntimeAssuranceEvidence
UnderwritingSignal
UnderwritingSimulationDelta
UnderwritingSimulationReport
UnderwritingSimulationRequest

Enums§

CapitalAllocationDecisionOutcome
CapitalAllocationDecisionReasonCode
CapitalBookEventKind
CapitalBookEvidenceKind
CapitalBookRole
CapitalBookSourceKind
CapitalExecutionInstructionAction
CapitalExecutionIntendedState
CapitalExecutionRailKind
CapitalExecutionReconciledState
CapitalExecutionRole
CreditBacktestReasonCode
CreditBondDisposition
CreditBondLifecycleState
CreditBondReasonCode
CreditBondedExecutionDecision
CreditBondedExecutionFindingCode
CreditFacilityCapitalSource
CreditFacilityDisposition
CreditFacilityLifecycleState
CreditFacilityReasonCode
CreditLossLifecycleEventKind
CreditLossLifecycleReasonCode
CreditReserveControlAppealState
CreditReserveControlExecutionState
CreditScorecardAnomalySeverity
CreditScorecardBand
CreditScorecardConfidence
CreditScorecardDimensionKind
CreditScorecardEvidenceKind
CreditScorecardReasonCode
ExposureLedgerEvidenceKind
GenericGovernanceCaseKind
GenericGovernanceCaseState
GenericGovernanceEffectiveState
GenericGovernanceEvidenceKind
GenericGovernanceFindingCode
GenericListingActorKind
GenericListingFreshnessState
GenericListingStatus
GenericNamespaceLifecycleState
GenericRegistryPublisherRole
GenericTrustActivationDisposition
GenericTrustActivationFindingCode
GenericTrustAdmissionClass
KernelError
Errors that can occur during kernel operations.
LiabilityAutoBindDisposition
LiabilityAutoBindReasonCode
LiabilityClaimAdjudicationOutcome
LiabilityClaimEvidenceKind
LiabilityClaimPayoutReconciliationState
LiabilityClaimResponseDisposition
LiabilityClaimSettlementKind
LiabilityClaimSettlementReconciliationState
LiabilityCoverageClass
LiabilityEvidenceRequirement
LiabilityPricingAuthorityEnvelopeKind
LiabilityProviderLifecycleState
LiabilityProviderType
LiabilityQuoteDisposition
OpenMarketAbuseClass
OpenMarketBondClass
OpenMarketCollateralReferenceKind
OpenMarketEvidenceKind
OpenMarketFindingCode
OpenMarketPenaltyAction
OpenMarketPenaltyEffectiveState
OpenMarketPenaltyState
UnderwritingAppealResolution
UnderwritingAppealStatus
UnderwritingBudgetAction
UnderwritingCertificationState
UnderwritingDecisionLifecycleState
UnderwritingDecisionOutcome
UnderwritingDecisionReasonCode
UnderwritingEvidenceKind
UnderwritingPremiumState
UnderwritingReasonCode
UnderwritingRemediation
UnderwritingReviewState
UnderwritingRiskClass

Constants§

CAPITAL_ALLOCATION_DECISION_ARTIFACT_SCHEMA
CAPITAL_BOOK_REPORT_SCHEMA
CAPITAL_EXECUTION_INSTRUCTION_ARTIFACT_SCHEMA
CREDIT_BACKTEST_REPORT_SCHEMA
CREDIT_BONDED_EXECUTION_SIMULATION_REPORT_SCHEMA
CREDIT_BOND_ARTIFACT_SCHEMA
CREDIT_BOND_LIST_REPORT_SCHEMA
CREDIT_BOND_REPORT_SCHEMA
CREDIT_FACILITY_ARTIFACT_SCHEMA
CREDIT_FACILITY_LIST_REPORT_SCHEMA
CREDIT_FACILITY_REPORT_SCHEMA
CREDIT_LOSS_LIFECYCLE_ARTIFACT_SCHEMA
CREDIT_LOSS_LIFECYCLE_LIST_REPORT_SCHEMA
CREDIT_LOSS_LIFECYCLE_REPORT_SCHEMA
CREDIT_PROVIDER_RISK_PACKAGE_SCHEMA
CREDIT_SCORECARD_SCHEMA
DEFAULT_CHECKPOINT_BATCH_SIZE
DEFAULT_GENERIC_LISTING_REPORT_MAX_AGE_SECS
DEFAULT_MAX_SIZE_BYTES
DEFAULT_MAX_STREAM_DURATION_SECS
DEFAULT_MAX_STREAM_TOTAL_BYTES
DEFAULT_RETENTION_DAYS
EMERGENCY_STOP_DENY_REASON
Deny reason surfaced by every evaluate path when the emergency kill switch is engaged. Exposed as pub so HTTP adapters and SDKs can pattern-match on the exact string without drifting.
EXPOSURE_LEDGER_SCHEMA
GENERIC_GOVERNANCE_CASE_ARTIFACT_SCHEMA
GENERIC_GOVERNANCE_CHARTER_ARTIFACT_SCHEMA
GENERIC_LISTING_ARTIFACT_SCHEMA
GENERIC_LISTING_NETWORK_SEARCH_SCHEMA
GENERIC_LISTING_REPORT_SCHEMA
GENERIC_LISTING_SEARCH_ALGORITHM_V1
GENERIC_NAMESPACE_ARTIFACT_SCHEMA
GENERIC_TRUST_ACTIVATION_ARTIFACT_SCHEMA
LIABILITY_AUTO_BIND_DECISION_ARTIFACT_SCHEMA
LIABILITY_BOUND_COVERAGE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_ADJUDICATION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_DISPUTE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PACKAGE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PAYOUT_INSTRUCTION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_PAYOUT_RECEIPT_ARTIFACT_SCHEMA
LIABILITY_CLAIM_RESPONSE_ARTIFACT_SCHEMA
LIABILITY_CLAIM_SETTLEMENT_INSTRUCTION_ARTIFACT_SCHEMA
LIABILITY_CLAIM_SETTLEMENT_RECEIPT_ARTIFACT_SCHEMA
LIABILITY_CLAIM_WORKFLOW_REPORT_SCHEMA
LIABILITY_MARKET_WORKFLOW_REPORT_SCHEMA
LIABILITY_PLACEMENT_ARTIFACT_SCHEMA
LIABILITY_PRICING_AUTHORITY_ARTIFACT_SCHEMA
LIABILITY_PROVIDER_ARTIFACT_SCHEMA
LIABILITY_PROVIDER_LIST_REPORT_SCHEMA
LIABILITY_PROVIDER_RESOLUTION_REPORT_SCHEMA
LIABILITY_QUOTE_REQUEST_ARTIFACT_SCHEMA
LIABILITY_QUOTE_RESPONSE_ARTIFACT_SCHEMA
MAX_CREDIT_BACKTEST_WINDOW_LIMIT
MAX_CREDIT_BOND_LIST_LIMIT
MAX_CREDIT_FACILITY_LIST_LIMIT
MAX_CREDIT_LOSS_LIFECYCLE_LIST_LIMIT
MAX_CREDIT_PROVIDER_LOSS_LIMIT
MAX_EXPOSURE_LEDGER_DECISION_LIMIT
MAX_EXPOSURE_LEDGER_RECEIPT_LIMIT
MAX_GENERIC_LISTING_LIMIT
MAX_LIABILITY_CLAIM_WORKFLOW_LIMIT
MAX_LIABILITY_MARKET_WORKFLOW_LIMIT
MAX_LIABILITY_PROVIDER_LIST_LIMIT
MAX_UNDERWRITING_DECISION_LIMIT
MAX_UNDERWRITING_RECEIPT_LIMIT
OPEN_MARKET_FEE_SCHEDULE_ARTIFACT_SCHEMA
OPEN_MARKET_PENALTY_ARTIFACT_SCHEMA
UNDERWRITING_APPEAL_SCHEMA
UNDERWRITING_COMPLIANCE_EVIDENCE_SCHEMA
UNDERWRITING_DECISION_ARTIFACT_SCHEMA
UNDERWRITING_DECISION_POLICY_SCHEMA
UNDERWRITING_DECISION_POLICY_VERSION
UNDERWRITING_DECISION_REPORT_SCHEMA
UNDERWRITING_POLICY_INPUT_SCHEMA
UNDERWRITING_RISK_TAXONOMY_VERSION
UNDERWRITING_SIMULATION_REPORT_SCHEMA

Traits§

Guard
A policy guard that the kernel evaluates before forwarding a tool call.
PromptProvider
Trait representing a prompt provider.
ResourceProvider
Trait representing a resource provider.

Functions§

aggregate_generic_listing_reports
build_generic_governance_case_artifact
build_generic_governance_charter_artifact
build_generic_trust_activation_artifact
build_open_market_fee_schedule_artifact
build_open_market_penalty_artifact
build_underwriting_decision_artifact
capability_matches_prompt_request
capability_matches_request
capability_matches_request_with_model_metadata
capability_matches_resource_pattern
capability_matches_resource_request
capability_matches_resource_subscription
ensure_generic_listing_namespace_consistency
evaluate_generic_governance_case
evaluate_generic_trust_activation
evaluate_open_market_penalty
evaluate_underwriting_policy_input
normalize_namespace

Type Aliases§

AgentId
CapabilityId
A string-typed capability identifier.
ServerId
A string-typed server identifier.
SignedCapitalAllocationDecision
SignedCapitalBookReport
SignedCapitalExecutionInstruction
SignedCreditBond
SignedCreditFacility
SignedCreditLossLifecycle
SignedCreditProviderRiskPackage
SignedCreditScorecardReport
SignedExposureLedgerReport
SignedGenericGovernanceCase
SignedGenericGovernanceCharter
SignedGenericListing
SignedGenericNamespace
SignedGenericTrustActivation
SignedLiabilityAutoBindDecision
SignedLiabilityBoundCoverage
SignedLiabilityClaimAdjudication
SignedLiabilityClaimDispute
SignedLiabilityClaimPackage
SignedLiabilityClaimPayoutInstruction
SignedLiabilityClaimPayoutReceipt
SignedLiabilityClaimResponse
SignedLiabilityClaimSettlementInstruction
SignedLiabilityClaimSettlementReceipt
SignedLiabilityPlacement
SignedLiabilityPricingAuthority
SignedLiabilityProvider
SignedLiabilityQuoteRequest
SignedLiabilityQuoteResponse
SignedOpenMarketFeeSchedule
SignedOpenMarketPenalty
SignedUnderwritingDecision
SignedUnderwritingPolicyInput