Crate vti_common 

Re-exports

pub use trust_tasks_capability_client as capability_client;

Modules

acl

audit

Audit log infrastructure — versioned envelope with HMAC-hashed actor / target identifiers and an in-store key history that survives right-to-be-forgotten rotations.

auth

config

consent

Consent store — records + KV helpers for VTA-gated inbound messaging.

context_path

Server-side re-export of the canonical context-path validators.

error

guards

Executor preconditions carried through the plan → approve → execute pipeline.

idempotency

Idempotency-Key header support.

identifier

Server-side re-export of the canonical identifier validator.

integrity

TEE integrity manifest (P0.2a — Layer 0 of the anti-rollback anchor).

outbox_store

Durable OutboxStore for the D1 delivery layer, backed by the workspace Store (local fjall or vsock-proxied).

pagination

Cursor pagination — workspace-wide standard for every list endpoint.

secure_file

Cross-platform file / directory permission tightening for secret-bearing paths (bootstrap seeds, keystores, export bundles).

seed_store

Shared trait for secret/seed storage backends.

store

telemetry

Pluggable telemetry sink for mediator-attribution events.

trust_task

Trust-Task primitive — every wire op in the workspace binds to a versioned Trust Task identifier published on trusttasks.org. See spec §3-L and §16 of docs/05-design-notes/vtc-mvp.md for the full design rationale.

vault

Vault entries — third-party credentials the holder has stored on the VTA, used by Companions and Services to authenticate against external sites and apps. M1 ships the metadata view + read-only store helpers; upsert, delete, sync, proxy-login, and release land in later milestones.