# structured-asic
Original-range ASiC-S and ASiC-E mechanisms for ETSI EN 319 162-1 and
EN 319 162-2 V1.1.1. Format, mathematical, incorporation and historical facts
remain separate from application trust and acceptance.
## Original input and execution
Implement `structured_asn1::range::RangeSource` over immutable caller-owned
ranges. Reads may suspend and return short positive results; the parser keeps
the original document/generation/length identity and bounded scratch. A resident
slice is a convenience, not a whole-file materialization requirement.
`Session` retains cumulative original work, entry and decode allowances. Every
new operation also uses its current `Work`. All attacker-controlled traversal,
copying, decompression and allocation are admitted before work; retained actual
capacity charges follow their allocations. Snapshot changes, acquisition,
unsupported methods, syntax and resource refusal keep distinct typed causes.
`zip::Archive` preserves every central-directory occurrence, exact UTF-8 filename,
duplicate, overlap and local/header/descriptor discrepancy. Stored and raw
DEFLATE streams enforce complete extent, decoded size and CRC. ZIP64 and signed
or unsigned descriptors use the same original-source core. There is no OS
extraction, path normalization, filename case folding or implicit resource fetch.
## Inspection and composition
1. Read the full original archive and `layout::Census`. Select the explicit
general, Part 1 baseline or Part 2 additional-container route. Layout facts
cannot establish MIME association, authenticated coverage or a signature level.
2. Inspect complete original `mimetype` bytes with `Member::read_media`.
`package` separately inspects source-produced ODF file declarations and OCF
rootfiles. ODF full-path is an exact ZIP filename, not a percent-decoded URI.
Root media equality checks the complete CRC-checked original member.
3. Supply the existing XML owner through `xml::producer::Factory`. The complete
funded member moves into its actual parsed owner; the asynchronous visitor
borrows that owner through completion. Only this closed scope creates retained
manifest/package facts. An independently parsed snapshot cannot be attached.
4. Use `xml::producer::signed::SignatureFactory` for owning verified XML state.
Its separate capability preserves all original roots, nested signatures,
direct and signed-Manifest references, missing resources and incomplete
catalogues. `Resources` transfers actual CRC-checked funded inputs and closed
original-member receipts. The trusted XML owner binds those inputs to its
actual verified reference operations. A resource receipt alone proves neither
reference digest agreement nor signature coverage.
5. Read carried CAdES/TSP/ERS from `Content` with the same producing session.
Detached CAdES uses one original payload pass and the existing common batch,
requiring the full original root signer census before provider initialization.
Actual signer/certificate/path binding and B-B/B-T/B-LT/B-LTA reports reuse
the existing common stages. XML reports are source-bound in the producing scope.
6. Resolve every ASiC manifest instruction to its exact original members.
Alias references share a native digest state and member pass, while every
original declaration retains its own outcome. ERS uses the common asynchronous
all-algorithm object pass, reduced-tree, timestamp and renewal implementation.
7. `archive::Graph` retains all original A.7 archive manifests and derives their
order from explicit predecessor links. Each renewal preserves previous
objects, manifests and timestamps. Exact token/input receipts and all object
digests are independent of graph geometry, historical material, longevity and
trust. A missing or bad latest occurrence never selects an older success.
XML parsing, namespace processing, canonicalization, XMLDSig and selected
cryptographic engines stay with their existing owners. A structural XML adapter
does not automatically implement owning asynchronous signature verification.
No backend or complete native XML adapter is bundled here. XMLERS is identified
as its distinct format; this crate does not substitute RFC 4998 for that grammar.
Unassessed schema-instance, encryption and extension data remain explicit facts.
The runtime supports `no_std + alloc` and has no hidden clock, file or network
access. Acquisition, path security policy, trusted roots, algorithm acceptance,
reports and UI belong to the caller. Initial registry publication and publisher
registration are separate from source/package availability.
## Verification
Public tests cover independently encoded stored/DEFLATE/ZIP64/descriptors,
short asynchronous reads, original identity, duplicates, negative census,
actual native P-256/SHA-256 CMS/TSP/ERS, cancellation and resource rollback.
Literal-only XML fixtures test owner contracts and are explicitly not a second
XML parser or native XMLDSig qualification.
With Python installed, the opt-in independent ZIP/zlib interoperability path is:
```sh
cargo nextest run --locked -p structured-asic --features interop-tests --test zip
```
Licensed under Apache-2.0.