Expand description
The production bindings of the service seams (ACCESS-003 R1), built once
from [auth.lys.services] and [auth.lys.broker].
SeatStarter:LysSeatStarter, a seat started by Lys’s start-command route on the configured machine.KeySender:ChannelKeySender, the keys published onsessions.<id>.keysthrough the server’s own publish path.BudgetSource:LysBudgets, budgets and stops read from Lys, carried whole.ServiceAction:PublishingActions, alarms and launches published on their subjects, context readings reported to Lys through theContextReporterthe context watch shares.
Every Lys request is made as this liminal, a machine Lys knows: the
bearer is the current machine pass held by the boot pass source,
verified offline at start exactly as any presented pass is. Without
[auth.lys.machine] the services cannot ask Lys as anyone, and start is
refused by that name, never served with a guessed identity.
Structs§
- Service
Bindings - Administrative effect seams and an optional address broker, bound once.
Functions§
- machine_
bearer - This machine’s own Lys pass as the bearer the services ask Lys with.