Module secure_deployment 

Pure profile resolution and readiness contracts for secure deployments.

Structs

BootstrapReadinessView

Readiness inputs for the one-time-token bootstrap path.

DeploymentSecurityConfigView

Complete pure input used before a service binds its data or management listeners.

DeploymentSecurityReport

Resolved profile, migration report, and fail-closed readiness failures.

SecurityBootstrapConfig

Security material required before a service is allowed to bind listeners.

SecurityProfileResolution

Effective profile and an explicit compatibility migration report.

SecurityProfileSelection

Profile input before the compatibility-preserving default is resolved.

ValidatedSecurityBootstrap

Non-sensitive proof that canonical bootstrap completed before listener ownership begins.

Enums

DeploymentOrigin

Whether configuration belongs to a newly created or already deployed installation.

DeploymentSecurityFailure

Stable reasons a resolved deployment is not safe to serve traffic.

SecurityBootstrap

Resolved process-wide security bootstrap state.

SecurityBootstrapMaterial

Identifies the security bootstrap material state.

SecurityBootstrapOutcome

Result of resolving and, when enabled, validating process security bootstrap.

SecurityBootstrapProfile

Explicit startup posture shared by every production service composition root.

SecurityMigrationStatus

Migration action produced alongside the effective profile.

Constants

MOUNTED_FILES_SECRET_PROVIDER

The mounted files secret provider constant.

SECURITY_ADMIN_IDENTITY_ENV

The security admin identity env constant.

SECURITY_PROFILE_ENV

The security profile env constant.

SECURITY_REQUEST_POLICY_ENV

The security request policy env constant.

SECURITY_SECRET_PROVIDER_ENV

The security secret provider env constant.

SECURITY_TLS_CERT_ENV

The security tls cert env constant.

SECURITY_TLS_KEY_ENV

The security tls key env constant.

SECURITY_TRUST_ANCHOR_ENV

The security trust anchor env constant.

Functions

resolve_security_profile

Resolves a profile without silently changing an identified existing deployment.

validate_deployment_security

Resolves the effective profile and validates the secure identity bootstrap prerequisites.

validate_security_bootstrap_from_env

Loads and validates the canonical process environment before listener bind.