Struct PrivateRegion 

pub struct PrivateRegion { /* private fields */ }

Unique writable region before any native capability escapes.

Implementations

impl PrivateRegion

pub fn allocate(options: RegionOptions) -> Result<Self, RegionError>

Allocates zeroed anonymous memory with a non-executable library view.

Delegated native authority follows the documented target policy; on Linux, a malicious memfd holder may create a separate executable alias.

Every GuardPolicy is accepted here: guard bands are installed when a committed batch maps each endpoint’s own active views, so a GuardPolicy::Require region fails at batch preparation or commit, not at allocation, when bands cannot install.

pub fn initialize<R>(&mut self, operation: impl FnOnce(&mut [u8]) -> R) -> R

Runs scoped initialization over logical bytes only.

pub fn prepare(self, spec: RegionSpec) -> Result<PreparedRegion, RegionError>

Consumes private ownership and attaches opaque transfer metadata.

Trait Implementations

impl Send for PrivateRegion