Crate vta_service 

VTA (Verifiable Trust Agent) service library.

This is the shared business logic used by both the vta binary (local/dev/cloud) and the vta-enclave binary (Nitro Enclave).

Front-end binaries import this library and call server::run() with the appropriate store backend and TEE context.

Modules

acl

acl_sweeper

Background pruning of expired ACL rows.

audit

Structured audit logging for security-relevant operations.

auth

backup_bundle_store

Fjall-backed storage for in-flight backup bundles.

backup_bundle_sweeper

Background pruning of expired + terminal backup bundles.

config

contexts

crypto_init

Register the rustls aws-lc-rs CryptoProvider as the process-wide default.

did_templates

Server-side storage for DID templates.

didcomm_bridge

error

keys

keyspaces

Central registry of the VTA’s keyspace names.

messaging

metrics

Prometheus metrics for operational observability.

operations

routes

seal

VTA Seal — prevents offline CLI commands from modifying state.

sealed_nonce_store

Persistent backing for the sealed-transfer NonceStore trait.

server

status

store

trust_tasks

Transport-neutral Trust-Task dispatch subsystem. Both the REST route (routes::trust_tasks-mounted dispatch_trust_task) and the DIDComm handle_trust_task handler dispatch through dispatch_trust_task_core here, so it lives at the crate root rather than under routes:: (P2.4). POST /api/trust-tasks — the VTA-side trust-task dispatcher.

vault

VTA credential vault — the format-agnostic credential store (docs/05-design-notes/vti-credential-architecture.md §5, task 1.1).

webvh_auth

Daemon REST authentication for webvh hosting servers.

webvh_client

webvh_didcomm

DIDComm transport for webvh server operations.

webvh_store

Functions

init_tracing

Initialize tracing/logging from config. Call once at startup before any log output. Shared by all VTA front-end binaries.

init_tracing_with_writer

Initialize tracing with a custom MakeWriter.