Crate vti_common

Modules§

acl
audit: Audit log infrastructure — versioned envelope with HMAC-hashed actor / target identifiers and an in-store key history that survives right-to-be-forgotten rotations.
auth
config
consent: Consent store — records + KV helpers for VTA-gated inbound messaging.
context_path: Server-side re-export of the canonical context-path validators.
error
idempotency: Idempotency-Key header support.
identifier: Server-side re-export of the canonical identifier validator.
integrity: TEE integrity manifest (P0.2a — Layer 0 of the anti-rollback anchor).
pagination: Cursor pagination — workspace-wide standard for every list endpoint.
secure_file: Cross-platform file / directory permission tightening for secret-bearing paths (bootstrap seeds, keystores, export bundles).
seed_store: Shared trait for secret/seed storage backends.
store
telemetry: Pluggable telemetry sink for mediator-attribution events.
trust_task: Trust-Task primitive — every wire op in the workspace binds to a versioned Trust Task identifier published on trusttasks.org. See spec §3-L and §16 of docs/05-design-notes/vtc-mvp.md for the full design rationale.
vault: Vault entries — third-party credentials the holder has stored on the VTA, used by Companions and Services to authenticate against external sites and apps. M1 ships the metadata view + read-only store helpers; upsert, delete, sync, proxy-login, and release land in later milestones.