gwk_kernel/blob.rs
1//! Content-addressed blob storage: the encrypted container and the store above
2//! it.
3//!
4//! The address is a digest over PLAINTEXT (ADR 0003), so two deployments with
5//! different KEKs still agree on what a blob IS and deduplication survives a
6//! key rotation. Encryption is purely a storage concern.
7//!
8//! [`container`] is the byte format and nothing else — no filesystem, no
9//! database, no clock. That is what lets its golden vectors be exact.
10
11pub mod container;
12pub mod store;