mnemo-mesh 0.5.21

SPIFFE-style identity + per-namespace ACL for Mnemo agents (v0.4.0 P0-2). Speaks the lifecycle-attestation envelope Cloudflare Mesh expects.
docs.rs failed to build mnemo-mesh-0.5.21
Please check the build logs for more information.
See Builds for ideas on how to fix a failed build, or Metadata for how to configure docs.rs builds.
If you believe this is docs.rs' fault, open an issue.
Visit the last successful build: mnemo-mesh-0.4.4

v0.4.0 (P0-2) — Cloudflare Mesh runtime adapter.

Cloudflare Mesh (announced 2026-04-24) defines the lifecycle-attestation envelope agent infrastructure is moving to: every workload presents a SPIFFE-style identity + an attestation token, and every privileged op carries an audit envelope back to a chained ledger. This crate makes Mnemo speak that protocol so Mesh-deployed agents can use Mnemo as their memory plane without losing the lifecycle-attestation chain.

Three pieces:

  1. [identity::MeshIdentity] — the (workload_spiffe_id, attestation_token) pair the caller presents on every op.
  2. [policy::MeshPolicyEnforcer] — pluggable ACL that decides whether the caller can perform a [MemOp] against a [Namespace].
  3. [MeshAuditEnvelope] — chained-HMAC envelope that links each decision back to the existing memory-provenance chain head, so audit-log export emits one continuous ledger instead of two parallel ones.