Module db 

The persistent local advisory database on the secure side.

<db_dir>/
  installed.json               what is live: sequence, snapshot date, digests
  advisories-<sequence>.json   the advisory set of that generation
  state/                       the anti-rollback floor (update-bundle RollbackStore)
  bundles/<bundle_id>.holger.znippy   the verified bundle, kept for re-verify
  receipts/<bundle_id>.json    the import receipt

A new generation is written beside the live one and goes live in ONE atomic rename of installed.json, so a reader sees either the old set or the new one, never half of either. installed.json records the set’s SHA-256 and a load refuses a set that no longer matches it: a database edited in place is an error, not an answer.

Structs

InstalledIntel

What is live.

LocalIntelDb

The database directory.

Constants

INSTALLED_SCHEMA

The schema of installed.json.