Expand description
Peer capabilities and cache.
PeerCapabilities is the snapshot of what a remote
participant has communicated about its security capabilities
(auth/crypto/access plugin class, accepted suites,
offered protection level, validity window, etc.). In RC1
this snapshot is populated from SPDP properties; here we
only define the data model plus an in-memory cache
for the runtime.
The cache is deliberately a lean alloc::collections::BTreeMap
wrapper: peers come and go, lookups are frequent, the typical
peer setup has dozens to low thousands of entries
— so no hash-overhead discussion.
See docs/architecture/08_heterogeneous_security.md §3.2
and §4.3 (upgrade path via update_partial).
Structs§
- Peer
Cache - In-memory cache
PeerKey → PeerCapabilities. - Peer
Capabilities - Security-relevant capabilities of a remote peer.
- Validity
- Validity window of a peer identity (Unix seconds).