Struct ReaderSlot 

pub struct ReaderSlot<'a> { /* private fields */ }

Acquire-only capability bound to a validated read-only mapping.

Implementations

impl<'a> ReaderSlot<'a>

pub unsafe fn bind( header: &'a SlotMetadata, binding: ReaderSlotBinding, ) -> Result<Self, SlotError>

Binds atomic metadata reached through a read-only native mapping.

Safety

header must reside at the checked slot offset represented by binding, be readable for 'a, and must not be reached through a writable mapping in this process.

pub fn observe( &self, expected_sequence: u64, ) -> Result<SlotObservation, SlotError>

Acquires and validates publication metadata before an owned payload copy.

pub fn recheck(&self, observation: SlotObservation) -> Result<(), SlotError>

Rechecks metadata stability after copying hostile bytes to owned storage.

This detects metadata changes, not payload integrity. A malicious writer can mutate bytes without changing metadata; callers must parse every owned payload copy as hostile input.