Crate hns_dane_engine 

Runtime-independent HNS browser engine facade.

Native adapters supply transport bytes, a presented leaf certificate, and prerequisite local cryptographic verdicts. The engine supplies deterministic state, query correlation, local DANE-EE matching, policy generation revocation, and structured provenance.

Structs

AdmittedDnsResponse

DNS bytes admitted after protocol parsing and exact query correlation.

AuthenticatedPeer

One admitted, established experimental peer.

BrowserBridgeAuthorization

Non-forgeable current-generation permission for an exact browser origin.

CompletionContext

Optional identities and chain anchor attached to a completed resolution.

DaneCompletion

Completed provenance plus the locally matched TLSA record details.

DnsRelayRequester

Stateful HIP-76 requester with its own nonzero request-ID space.

Engine

Thread-safe deterministic browser engine.

EngineConfig

Engine construction configuration.

EngineSnapshot

Immutable structured engine status.

ExperimentalRequest

Request passed to a platform Brontide adapter.

ExperimentalResponse

Response attested by a platform Brontide adapter.

Gateway

One bounded direct-first gateway resolution.

GatewayLimits

Bounds applied before an adapter response can enter DNS parsing.

GatewayResolution

Gateway-selected response atomically admitted to the current engine.

GatewaySelection

Successful actual transport selection.

LocalDanePrerequisites

Local evidence required before the engine performs TLSA/DANE matching.

ObservabilityRuntime

Runtime-owned fields needed to produce shared status.

OdohRequester

Stateful HIP-77 requester with its own nonzero request-ID space.

ParsedResponse

Owned, structurally correlated DNS response.

PeerIdentity

A compressed secp256k1 key authenticated by an established Brontide session.

RequesterLimits

Bounded requester configuration.

ResolutionAttempt

A query and transport admission bound to engine generations.

RuntimeSessionId

Checked, nonzero identity for one browser-runtime start.

ValidatedDaneInput

Inputs for engine-owned DNSSEC and DANE completion.

VerifiedOdohTarget

A signed, current ODoH target record reduced to immutable requester fields.

Enums

AdapterFailure

Failure classification supplied by a platform adapter.

AuthorityState

Browser authority state required by the browser resolution model.

EngineError

Facade failure.

P2pTransportError

Authenticated peer, protocol, DNS, deadline, or resource-bound failure.

Constants

ENGINE_API_VERSION

Stable Rust facade API version.

MAX_TRANSPORT_IDENTITY_BYTES

Maximum UTF-8 bytes accepted for one transport identity.

Traits

ExperimentalExchange

Socket/runtime boundary for one established Brontide request.