internal/

Package daemon implements openbloxd: the policy broker that owns the Docker connection so its callers need no socket access.

Package testpki generates a throwaway certificate authority for tests that need a real mTLS handshake.