sealed

var ErrFamilyUnprovisioned = errors.New("messaging/sealed: family has no provisioned generation on this consumer")

ErrFamilyUnprovisioned fires at consumer startup when a Logical kid the declaration names has no provisioned generation on this side: nothing could verify or decrypt, so the consumer never starts.

var ErrGenerationUnresolvable = errors.New("messaging/sealed: provisioned generation does not resolve in the consumer's role")

ErrGenerationUnresolvable fires at consumer startup when a provisioned generation is indexed under the right role but the key store cannot hand out its material in that role — a consumer that started anyway would refuse every delivery under that kid.

var ErrKeyStoreNoFamilies = errors.New("messaging/sealed: the registered key store does not enumerate generation families; sealing needs the keystore module's store")

ErrKeyStoreNoFamilies fires when the registered key store cannot enumerate generation families — sealing needs the keystore module's store, not an arbitrary KeyStore.

var ErrRoleMismatch = errors.New("messaging/sealed: active generation lacks the role its role in sealing requires")

ErrRoleMismatch fires at startup when an active generation lacks the role its side needs.