windowscallback

type Binding ¶

type Binding struct{ SnapshotPath, SHA256 string }

type NativePort ¶

type NativePort interface {
	CheckReadiness(context.Context, Binding, uint64) error
}

type Outcome ¶

type Outcome string

const (
	Unavailable Outcome = "unavailable"
	Declined    Outcome = "declined"
	Accepted    Outcome = "accepted"
	Unknown     Outcome = "unknown"
)

type Port ¶

type Port struct {
	// contains filtered or unexported fields
}

Port is intentionally inert until checkpoint B installs and qualifies the actual custody/readiness/submission contract. Even present release bytes do not enable this adapter. Construction and calls perform no native probes.

func NewPort() Port

func (Port) CheckReadiness(ctx context.Context, _ Binding, _ uint64) error

func (p Port) TrustedAsset() ([]byte, string, error)

type Record ¶

type Record struct {
	Generation, Reference, Provider, ThreadID, SnapshotSHA256 string
}

func DecodeRecord(b []byte) (Record, error)

func (r Record) BoundTo(s Snapshot, digest string) error

func (r Record) Validate() error

type Result ¶

type Result struct {
	Outcome         Outcome
	EffectEntered   bool
	TargetConfirmed bool
}

Result does not expose HRESULT or claim focus/render or an exact FullName lock.

type Snapshot ¶

type Snapshot struct {
	Generation, CanonicalRoot, OwnerSID, HelperSHA256, AUMID, CLSID string
	VendorName, Publisher, Family, FullName                         string
}

Snapshot is an immutable generation binding, not proof of installed readiness.

func DecodeSnapshot(b []byte) (Snapshot, error)

func (s Snapshot) Validate() error