hatchling_skill/lib.rs
1//! Signed skills: the trust core.
2//!
3//! Part of [Hatchling](https://github.com/undergroundrap/hatchling), published so
4//! [`hatchling-runtime`](https://crates.io/crates/hatchling-runtime) can be
5//! installed. It carries no stability promise on its own.
6//!
7//! Every skill is signed, sandboxed, and capability-scoped. An unsigned
8//! skill, a tampered skill, or a skill asking for capabilities it wasn't
9//! granted does not run — fail-closed, structurally, not by convention.
10//!
11//! This crate implements the signing + manifest + admission
12//! trust core. The broker verifies signatures before admission; the
13//! cell never self-attests.
14
15mod error;
16mod manifest;
17mod registry;
18mod verify;
19
20pub use error::Error;
21pub use manifest::{Manifest, SIGNING_CONTEXT, SignedManifest};
22pub use registry::{CodeHash, RegisteredSkill, SkillId, SkillRegistry};
23pub use verify::{Admission, check_trust_root, verify_admission};