Module local 

Same-host FIPS rendezvous and authenticated capability directory.

One process holds a well-known loopback UDP socket as the sticky local rendezvous anchor. A tiny nonce exchange returns its untrusted public-key hint; the client then uses the ordinary Noise IK discovered-peer path to prove ownership. Capabilities are exchanged only through encrypted FSP and kept in memory; authenticated announcements refresh short leases so forced process death expires without filesystem state. Loopback grants no trust exception.

Structs

LocalInstanceAdvertisement

Direct in-memory provider record learned over an authenticated local FIPS link. A changed startup epoch denotes a restarted provider even when its long-lived identity is unchanged.

LocalInstanceCapability

One reusable capability advertised by an authenticated same-host peer.

LocalInstanceDiscoveryConfig

Runtime configuration for same-host rendezvous over loopback UDP.

Enums

LocalInstanceRegistryError

Legacy filesystem-discovery error retained for endpoint API compatibility. In-memory loopback capability snapshots are infallible and return none of these variants.

Constants

DEFAULT_LOCAL_RENDEZVOUS_ADDR

Host-global loopback UDP address used by the local rendezvous anchor.

Functions

rank_capability_providers

Rank every provider so a consumer can try the next one after a service failure. Highest capability priority sorts first.

select_capability_provider

Choose one provider deterministically. Higher capability priority wins; ties are ordered by authenticated identity and then process epoch.