Crate saddle

Expand description

The only Saddle crate that business applications directly depend on.

Pool construction and Service registry assembly remain framework-owned:

let _ = saddle::db::Database::connect;

let _ = saddle::service::ServiceRegistryBuilder::new();

The old static/three-argument launcher is not a public surface:

let _ = saddle::Saddle::run;

Modules§

managed: The complete stable set of business-owned values accepted by generated Saddle 0.2 handlers.

application: Declares the sole generated Saddle application in a business crate.

ApprovedExternalBundleApplicabilityFailure: Recoverable failure of the final signed-filesystem/applicability pairing. The aggregate remains whole; neither half is exposed independently.
ApprovedExternalBundleVerification: Verified seven-owner result. Fields are private and raw evidence is absent.
ListenerAuthoritySeal: One-shot facade seal for the independent listener authority provider.
ProductionLauncher: Opaque, non-Clone permission to start the sole production assembly.
SaddleConfig: Fixed 0.2 process facts. Capacity/profile values remain private candidate inputs until the final Gate freeze.
SaddleError: An error safe to propagate across Saddle component boundaries.
VerifiedListenerAuthority: Verified independent listener authority. Fields are private and non-Clone.

ErrorKind: Stable error categories used at component and Service boundaries.

ApprovedBundleNonceReservation: Linear nonce reservation held until listener authority has also verified. A deployment implementation must make commit atomically single-success across processes/threads for its signed nonce.
ApprovedExternalBundle: Deployment-provided verifier for one opaque signed evidence bundle.
ListenerAuthorityProvider: Independent deployment-provided listener/startup authority verifier. Verification permission from the evidence bundle is not listener authority.