hatchling-skill 0.1.2

Signed skills: manifest format, Ed25519 verification, admission-time grant checks, and call-time capability enforcement
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

//! Signed skills: the trust core.
//!
//! Part of [Hatchling](https://github.com/undergroundrap/hatchling), published so
//! [`hatchling-runtime`](https://crates.io/crates/hatchling-runtime) can be
//! installed. It carries no stability promise on its own.
//!
//! Every skill is signed, sandboxed, and capability-scoped. An unsigned
//! skill, a tampered skill, or a skill asking for capabilities it wasn't
//! granted does not run — fail-closed, structurally, not by convention.
//!
//! This crate implements the signing + manifest + admission
//! trust core. The broker verifies signatures before admission; the
//! cell never self-attests.

mod error;
mod manifest;
mod registry;
mod verify;

pub use error::Error;
pub use manifest::{Manifest, SIGNING_CONTEXT, SignedManifest};
pub use registry::{CodeHash, RegisteredSkill, SkillId, SkillRegistry};
pub use verify::{Admission, check_trust_root, verify_admission};