Expand description
TOFU persistence of host-key fingerprints under XDG.
Line-oriented format (0o600):
host:port <fingerprint_sha256>
§Concurrency (G-PAR-49)
Multi-host fan-out can run N first-connect TOFU writes against the same file.
Every mutating path takes an exclusive flock on a sibling *.lock file,
reloads disk state, merges, then atomic-persists — same pattern as
crate::vps::save for config.toml.
Structs§
- Known
Hosts - Map of host:port → fingerprint.
Functions§
- verify_
tofu - Verify TOFU fingerprint under exclusive flock (G-PAR-49 / G-TLS-10).