cuttlefish_host/lib.rs
1//! The wasmtime host: drives proc-blocks and enforces what they may reach.
2//!
3//! Stub: the runner, capability checks, and file-handle table land here next.
4//!
5//! This is the crate where the project's security boundary actually lives. The
6//! compile-time capability check in [`cuttlefish_core`] produces good error
7//! messages; the checks *here* are what a malicious or malfunctioning block
8//! actually runs into, and they fail closed.
9
10#![forbid(unsafe_code)]
11#![warn(missing_docs)]