Module lys 

The ticket’s own Lys pass.

With a [lys] table the ticket asks Lys’s agent pass route for a liminal pass. A certified seat signs the exact request with its key in the attestation shape Lys verifies. A run uses LYS_AGENT and LYS_AGENT_PASS. Passes are held per audience: the signed route renews within RENEW_WITHIN_SECS, and the run route at expiry. A station receives the seat’s own pass for its store. The pass is checked when a call needs one; no timer runs, and no key, signature or pass enters an error or a log.

Structs

LysAgent

Asks Lys’s agent pass route for this agent’s liminal pass.

LysTable

The [lys] table: where the agent asks for its pass and its optional key.

PassError

Why the ticket has no pass, in words that never carry a secret.

Constants

RENEW_WITHIN_SECS

A held pass expiring within this many seconds is renewed before use.