Module lifecycle_v2 

Unreleased Podman profile boundary. No requests, execution or migration authority. Docker lifecycle-v1 remains separate. Service identity and API wire semantics must be specified before this profile can be wired into a host or adapter.

Modules

capture_binding

Frozen capture operation-key binding. No dispatch, freshness or authority.

capture_inputs

Inherited descriptor validation only; seals are not launcher authentication.

capture_wire

Canonical read-only wire. Parsing does not establish protected FD provenance.

encoding

Bounded canonical identity envelope; not a journal or filesystem verifier.

installation

Held installation bytes, not executable trust, dispatch or lease authority.

native_create

Restricted native SpecGenerator encoding. No dispatch or durable authority.

native_exec

Source-pinned native mutation wire helpers; no dispatch or retry authority. Callers must durably reserve each mutation before sending, retain ambiguous outcomes, and never reconstruct/replay create or start after response loss.

native_image

Native exact-ID image facts; no tag resolution, pull or absence authority.

native_info

Bounded native Libpod info body decoder with explicit API profiles. HTTP route/status/framing and held socket verification are caller obligations.

native_status

Pure native v6.1.4 inspect response checks. No transport or lease authority. The caller must bind observations, protected configuration and the held socket.

observation

Native Libpod observation comparison, not daemon authentication or restart proof. Adapter-side HTTP parsing and Core-held socket/config verification remain required.

ownership

Exact selected ownership facts from native inspect, not journal authority. Expected values must eventually come from a protected durable create plan.

plan_record

Canonical same-context evidence codec. No storage or dispatch authority.

plan_storage

Create-new evidence storage. Errors retain files; never retry or repair them.

profile

Explicit profile selection and durable slot identity, independent of engine I/O.

protected_context

Linux filesystem checkpoint only: protected config bytes and held socket inode. An O_PATH descriptor is not a connected transport or peer authentication.

readonly

Read-only info/inspect/info composition over an injected GET exchange. The exchange must supply bounded, deadline-controlled HTTP transport. This module does not prove a connection’s identity, authentication or lifetime.