runtimeexecutorlocal

package
v0.40.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 24, 2026 License: Apache-2.0 Imports: 54 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func BindWireGuardFabric 

func BindWireGuardFabric(root string, custody WireGuardFabricCustody) error

BindWireGuardFabric records the local Owner's adoption of external handles. It does not create a fabric, select peers, copy keys or activate networking.

func NewOSBasementPolicyOperations 

func NewOSBasementPolicyOperations(workspaceRoot string) (*osBasementPolicyOperations, error)

NewOSBasementPolicyOperations constructs the single workspace-scoped owner of all local Basement policy projections.

func NewOSCloudHostSecurityOperations 

func NewOSCloudHostSecurityOperations(workspaceRoot string) (*osCloudHostSecurityOperations, error)

NewOSCloudHostSecurityOperations explicitly selects the local operating system as the closed Cloud host-security capability owner. Constructing an executor does not grant this authority; product composition must opt in.

func NewOSCloudHostSecurityOperationsForDispatchedChannel 

func NewOSCloudHostSecurityOperationsForDispatchedChannel(workspaceRoot string) (*osCloudHostSecurityOperations, error)

NewOSCloudHostSecurityOperationsForDispatchedChannel selects the same owner for an Apply dispatched through an Inventory-declared standard execution channel. That channel's operations process keeps its own login account, so host security preserves the default execution account instead of creating one named after the Owner.

func NewOSCloudIdentityTrustPolicyOperations 

func NewOSCloudIdentityTrustPolicyOperations(workspaceRoot string) (*osCloudIdentityTrustPolicyOperations, error)

NewOSCloudIdentityTrustPolicyOperations constructs the single workspace-scoped owner of the local Cloud identity-trust policy projection.

func NewOSCloudPublicEdgeOperations 

func NewOSCloudPublicEdgeOperations(workspaceRoot string) (*osCloudPublicEdgeOperations, error)

NewOSCloudPublicEdgeOperations explicitly selects the local operating system as the closed Cloud public-edge capability owner. Product composition must opt in; constructing an executor grants nothing.

func NewOSInternalPKIOperations 

func NewOSInternalPKIOperations(workspaceRoot string) (*osInternalPKIOperations, error)

func NewOSPublicTLSOperations 

func NewOSPublicTLSOperations(workspaceRoot string) (*osPublicTLSOperations, error)

NewOSPublicTLSOperations binds Public TLS to the node-local Traefik edge. The owner never reads or writes private key material: Traefik's ACME resolver owns that custody. Route/config owners provide the declared router; this adapter requires its ACME resolver and proves the resulting public HTTPS certificate over the wire before it records lifecycle evidence.

func ObserveStandaloneComposeContainerCustody 

func ObserveStandaloneComposeContainerCustody(
	ctx context.Context,
	workspace string,
	deployment SelectedPaaSWorkloadDeployment,
) (map[string]string, error)

ObserveStandaloneComposeContainerCustody reads the exact Compose container identity for every component in an already admitted deployment. It checks the owner-controlled Compose files before and after the daemon readback, and accepts stopped and one-shot containers because this is an identity check, not a health observation.

func PrepareCloudExecutionChannel 

func PrepareCloudExecutionChannel(ctx context.Context, workspaceRoot string, dispatched bool) error

PrepareCloudExecutionChannel provisions the non-root execution-channel account and workspace-custodied SSH key before Cloud host-security disables root login. Installers and `stackkit host prepare` call this idempotently. A dispatched Apply (see NewOSCloudHostSecurityOperationsForDispatchedChannel) keeps the default execution account.

func RemoveStandaloneComposeWorkload 

func RemoveStandaloneComposeWorkload(
	ctx context.Context,
	workspace string,
	request workloadremoval.Request,
) (workloadremoval.Result, error)

RemoveStandaloneComposeWorkload removes one applied standalone Compose workload using the sealed owner request. It never rewrites generated Compose files and never deletes bind-mounted media or undeclared volumes.

func ValidateSelectedPaaSWorkloadObservation 

func ValidateSelectedPaaSWorkloadObservation(
	deployment SelectedPaaSWorkloadDeployment,
	observation SelectedPaaSWorkloadObservation,
) error

ValidateSelectedPaaSWorkloadObservation applies the product-owned semantic observation contract after an operations owner has read the runtime. The standalone Compose prober deliberately reports the observed HTTP status but does not decide whether that status satisfies the selected application contract; restore verification must use this boundary rather than trusting the generic Status field.

func WireGuardFabricInterface 

func WireGuardFabricInterface(fabricRef string) string

func WithStandaloneComposeHTTP 

func WithStandaloneComposeHTTP(ctx context.Context, workspace string, deployment SelectedPaaSWorkloadDeployment, run func(*http.Client, string) error) error

WithStandaloneComposeHTTP extends the existing application adapter with a bounded local API session. The caller supplies its already admitted deployment, never a URL. Every request rechecks the same Compose container, image, persisted configuration, and loopback binding before sending secrets.

Types

type BackupDirectoryObservation 

type BackupDirectoryObservation struct {
	Path   string      `json:"path"`
	Mode   fs.FileMode `json:"-"`
	Status string      `json:"status"`
}

BackupDirectoryObservation is the bounded post-bootstrap fact returned by the Home backup-target host adapter.

type BasementComposeAuthority 

type BasementComposeAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

BasementComposeAuthority is the service-owned catalog binding selected when the adapter is registered. Hashes are never learned from the request.

type BasementComposeExecutor 

type BasementComposeExecutor struct {
	// contains filtered or unexported fields
}

BasementComposeExecutor is an isolated adapter for the optional concrete Basement socket-proxy Compose unit. Its Product factory requires an authenticated local Operations implementation and never discovers Docker.

func NewBasementComposeExecutor 

func NewBasementComposeExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BasementComposeAuthority, compose BasementComposeOperations) *BasementComposeExecutor

func (*BasementComposeExecutor) Execute 

func (e *BasementComposeExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*BasementComposeExecutor) Identity 

func (e *BasementComposeExecutor) Identity() runtimeexecutor.ExecutorIdentity

type BasementComposeOperations 

type BasementComposeOperations interface {
	ApplyProject(context.Context, ComposeProject) (ComposeApplyObservation, error)
	VerifyProject(context.Context, ComposeProject) (ComposeVerifyObservation, error)
}

BasementComposeOperations is supplied by the authenticated local execution channel owner. The adapter cannot choose or discover a Docker endpoint and cannot fall back to shell execution.

type BasementCoreApplyObservation 

type BasementCoreApplyObservation struct {
	ProjectRef         string `json:"projectRef"`
	ArtifactDigest     string `json:"artifactDigest"`
	OwnerRef           string `json:"ownerRef"`
	PocketIDSubject    string `json:"pocketIdSubject"`
	OwnerBindingDigest string `json:"ownerBindingDigest"`
	Status             string `json:"status"`
}

type BasementCoreAuthority 

type BasementCoreAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHashes map[string]string
}

type BasementCoreExecutor 

type BasementCoreExecutor struct {
	// contains filtered or unexported fields
}

func NewBasementCoreExecutor 

func NewBasementCoreExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BasementCoreAuthority, operations BasementCoreOperations) *BasementCoreExecutor

func (*BasementCoreExecutor) Execute 

func (e *BasementCoreExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*BasementCoreExecutor) Identity 

func (e *BasementCoreExecutor) Identity() runtimeexecutor.ExecutorIdentity

type BasementCoreHealthContract 

type BasementCoreHealthContract struct {
	SourceRef        string
	Kind             string
	TargetKind       string
	TargetRef        string
	Port             int
	Path             string
	ExpectedStatuses []int
}

BasementCoreHealthContract is the public, secret-free projection of one selected Core profile's post-apply health gate. Commands and local runtime owners consume this projection instead of maintaining a second Lite list.

type BasementCoreHealthExpectation 

type BasementCoreHealthExpectation struct {
	RequirementID    string
	SourceRef        string
	Kind             string
	Port             int
	Path             string
	ExpectedStatuses []int
}

type BasementCoreObservationDriftError 

type BasementCoreObservationDriftError struct {
	// contains filtered or unexported fields
}

func (*BasementCoreObservationDriftError) DriftCode 

func (err *BasementCoreObservationDriftError) DriftCode() string

func (*BasementCoreObservationDriftError) DriftProjectRef 

func (err *BasementCoreObservationDriftError) DriftProjectRef() string

func (*BasementCoreObservationDriftError) DriftSubject 

func (err *BasementCoreObservationDriftError) DriftSubject() string

func (*BasementCoreObservationDriftError) Error 

func (err *BasementCoreObservationDriftError) Error() string

func (*BasementCoreObservationDriftError) Unwrap 

func (err *BasementCoreObservationDriftError) Unwrap() error

type BasementCoreOperations 

type BasementCoreOperations interface {
	ApplyProject(context.Context, BasementCoreProject) (BasementCoreApplyObservation, error)
	VerifyProject(context.Context, BasementCoreProject) (BasementCoreVerifyObservation, error)
}

func NewOSBasementCoreOperations 

func NewOSBasementCoreOperations(workspaceRoot string) (BasementCoreOperations, error)

NewOSBasementCoreOperations explicitly grants the local workspace's fixed Docker Compose capability. The workspace is construction-owned and all request-controlled paths, executables, endpoints, and credentials are excluded from the Operations boundary.

type BasementCoreProbeObservation 

type BasementCoreProbeObservation struct {
	RequirementID string `json:"requirementId"`
	Status        string `json:"status"`
}

type BasementCoreProject 

type BasementCoreProject struct {
	ModuleRef           string
	ProjectRef          string
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
	ArtifactID          string
	ArtifactDigest      string
	Definition          []byte
	Services            []BasementCoreServiceExpectation
	Health              []BasementCoreHealthExpectation
}

BasementCoreProject is the closed, provider-free capability passed to the local Docker owner. It contains no executable, Docker endpoint, credential, or caller-selected filesystem path.

type BasementCoreRuntimeProfile 

type BasementCoreRuntimeProfile struct {
	ProviderRef      string
	ModuleRef        string
	UnitRef          string
	WorkloadRef      string
	OutputRef        string
	ArtifactPrefix   string
	ImageRef         string
	ImageDigest      string
	MaxArtifactBytes int
	Services         []BasementCoreServiceExpectation
	Health           []BasementCoreHealthContract
}

BasementCoreRuntimeProfile is the finite profile identity shared by Apply, live Verify, and Restore post-verification. It carries no endpoints, credentials, or caller-controlled paths.

func BasementCoreRuntimeProfileForModule 

func BasementCoreRuntimeProfileForModule(moduleRef string) (BasementCoreRuntimeProfile, bool)

BasementCoreRuntimeProfileForModule returns the one known local Core profile selected by the verified plan. Unknown module identities are rejected so a caller cannot turn a generic verifier into a fallback.

func (BasementCoreRuntimeProfile) ValidateComposeArtifact 

func (profile BasementCoreRuntimeProfile) ValidateComposeArtifact(content []byte) bool

type BasementCoreServiceExpectation 

type BasementCoreServiceExpectation struct {
	Ref            string
	ImageRef       string
	ImageDigest    string
	HealthRequired bool
}

type BasementCoreServiceObservation 

type BasementCoreServiceObservation struct {
	Ref         string `json:"ref"`
	ImageRef    string `json:"imageRef"`
	ImageDigest string `json:"imageDigest"`
	Status      string `json:"status"`
	Health      string `json:"health"`
}

type BasementCoreVerifyObservation 

type BasementCoreVerifyObservation struct {
	ProjectRef         string                           `json:"projectRef"`
	ArtifactDigest     string                           `json:"artifactDigest"`
	OwnerRef           string                           `json:"ownerRef"`
	PocketIDSubject    string                           `json:"pocketIdSubject"`
	OwnerBindingDigest string                           `json:"ownerBindingDigest"`
	Status             string                           `json:"status"`
	Services           []BasementCoreServiceObservation `json:"services"`
	Probes             []BasementCoreProbeObservation   `json:"probes"`
}

type BasementIdentityTrustApplyObservation 

type BasementIdentityTrustApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type BasementIdentityTrustPolicyAuthority 

type BasementIdentityTrustPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type BasementIdentityTrustPolicyBinding 

type BasementIdentityTrustPolicyBinding struct {
	SiteRefs            []string
	NodeRefs            []string
	ExecutionChannelRef string
}

type BasementIdentityTrustPolicyExecutor 

type BasementIdentityTrustPolicyExecutor struct {
	// contains filtered or unexported fields
}

BasementIdentityTrustPolicyExecutor admits only the exact CUE policy and delegates enforcement/readback to the owner-bound local policy store.

func NewBasementIdentityTrustPolicyExecutor 

func NewBasementIdentityTrustPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding BasementIdentityTrustPolicyBinding, authority BasementIdentityTrustPolicyAuthority, operations BasementIdentityTrustPolicyOperations) *BasementIdentityTrustPolicyExecutor

func (*BasementIdentityTrustPolicyExecutor) Execute 

func (e *BasementIdentityTrustPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*BasementIdentityTrustPolicyExecutor) Identity 

func (e *BasementIdentityTrustPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type BasementIdentityTrustPolicyOperations 

type BasementIdentityTrustPolicyOperations interface {
	EnforceDeviceSessionVerification(context.Context, BasementIdentityTrustRuntimePolicy) (BasementIdentityTrustApplyObservation, error)
	EnforceHumanSessionVerification(context.Context, BasementIdentityTrustRuntimePolicy) (BasementIdentityTrustApplyObservation, error)
	EnforceWorkloadIdentityVerification(context.Context, BasementIdentityTrustRuntimePolicy) (BasementIdentityTrustApplyObservation, error)
	VerifyBasementIdentityTrustPolicy(context.Context, BasementIdentityTrustVerifyExpectation) (BasementIdentityTrustVerifyObservation, error)
}

BasementIdentityTrustPolicyOperations owns only verifier configuration and readback. Enrollment, issuance, signing, key bytes, credentials, endpoints, provider lifecycle, and generic execution are deliberately absent.

type BasementIdentityTrustRuntimePolicy 

type BasementIdentityTrustRuntimePolicy struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	Verifiers    []architecturev2renderer.BasementIdentityTrustVerifier
}

type BasementIdentityTrustVerifyExpectation 

type BasementIdentityTrustVerifyExpectation struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	VerifierIDs  []string
	NotBefore    time.Time
}

type BasementIdentityTrustVerifyObservation 

type BasementIdentityTrustVerifyObservation struct {
	PolicyDigest           string `json:"policyDigest"`
	Status                 string `json:"status"`
	DeviceVerifierStatus   string `json:"deviceVerifierStatus"`
	HumanVerifierStatus    string `json:"humanVerifierStatus"`
	WorkloadVerifierStatus string `json:"workloadVerifierStatus"`
	ObservedAt             string `json:"observedAt"`
}

type BridgeOriginMTLSApplyPolicy 

type BridgeOriginMTLSApplyPolicy struct {
	PolicyDigest        string                                                     `json:"policyDigest"`
	StackID             string                                                     `json:"stackId"`
	SiteRef             string                                                     `json:"siteRef"`
	NodeRef             string                                                     `json:"nodeRef"`
	ExecutionChannelRef string                                                     `json:"executionChannelRef"`
	EvaluatedAt         string                                                     `json:"evaluatedAt"`
	Publications        []architecturev2renderer.BridgeOriginMTLSPublicationPolicy `json:"publications"`
}

type BridgeOriginMTLSAuthority 

type BridgeOriginMTLSAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type BridgeOriginMTLSExecutor 

type BridgeOriginMTLSExecutor struct {
	// contains filtered or unexported fields
}

func NewBridgeOriginMTLSExecutor 

func NewBridgeOriginMTLSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BridgeOriginMTLSAuthority, operations BridgeOriginMTLSOperations) *BridgeOriginMTLSExecutor

func NewBridgeOriginMTLSExecutorWithClock 

func NewBridgeOriginMTLSExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BridgeOriginMTLSAuthority, operations BridgeOriginMTLSOperations, now func() time.Time) *BridgeOriginMTLSExecutor

func (*BridgeOriginMTLSExecutor) Execute 

func (e *BridgeOriginMTLSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*BridgeOriginMTLSExecutor) Identity 

func (e *BridgeOriginMTLSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type BridgeOriginMTLSExpectation 

type BridgeOriginMTLSExpectation struct {
	PolicyDigest        string                                                     `json:"policyDigest"`
	StackID             string                                                     `json:"stackId"`
	SiteRef             string                                                     `json:"siteRef"`
	NodeRef             string                                                     `json:"nodeRef"`
	ExecutionChannelRef string                                                     `json:"executionChannelRef"`
	EvaluatedAt         string                                                     `json:"evaluatedAt"`
	Publications        []architecturev2renderer.BridgeOriginMTLSPublicationPolicy `json:"publications"`
}

type BridgeOriginMTLSMaterialObservation 

type BridgeOriginMTLSMaterialObservation struct {
	ServiceRef                   string   `json:"serviceRef"`
	IdentityRef                  string   `json:"identityRef"`
	ModuleRef                    string   `json:"moduleRef"`
	UnitRef                      string   `json:"unitRef"`
	OriginInstanceRef            string   `json:"originInstanceRef"`
	UpstreamProtocol             string   `json:"upstreamProtocol"`
	TargetPort                   int      `json:"targetPort"`
	ServerName                   string   `json:"serverName"`
	MinimumTLSVersion            string   `json:"minimumTLSVersion"`
	MutualTLSRequired            bool     `json:"mutualTLSRequired"`
	ClientCertificateRequired    bool     `json:"clientCertificateRequired"`
	OutboundOnly                 bool     `json:"outboundOnly"`
	GeneralLANAccess             bool     `json:"generalLANAccess"`
	CredentialIssuerRef          string   `json:"credentialIssuerRef"`
	Issuer                       string   `json:"issuer"`
	Audience                     string   `json:"audience"`
	VerificationKeySetRef        string   `json:"verificationKeySetRef"`
	EdgeVerifierRef              string   `json:"edgeVerifierRef"`
	VerifierDistributionRef      string   `json:"verifierDistributionRef"`
	CertificateSubjectRef        string   `json:"certificateSubjectRef"`
	CertificateSANs              []string `json:"certificateSANs"`
	CertificateExtendedKeyUsages []string `json:"certificateExtendedKeyUsages"`
	CertificateCA                bool     `json:"certificateCA"`
	CertificateChainVerified     bool     `json:"certificateChainVerified"`
	CertificateFingerprint       string   `json:"certificateFingerprint"`
	PublicKeyFingerprint         string   `json:"publicKeyFingerprint"`
	Serial                       string   `json:"serial"`
	NotBefore                    string   `json:"notBefore"`
	NotAfter                     string   `json:"notAfter"`
	ConfigurationObservedAt      string   `json:"configurationObservedAt"`
	RevocationStateObservedAt    string   `json:"revocationStateObservedAt"`
}

type BridgeOriginMTLSObservation 

type BridgeOriginMTLSObservation struct {
	PolicyDigest string                                `json:"policyDigest"`
	Status       string                                `json:"status"`
	EvaluatedAt  string                                `json:"evaluatedAt"`
	ObservedAt   string                                `json:"observedAt"`
	Materials    []BridgeOriginMTLSMaterialObservation `json:"materials"`
}

BridgeOriginMTLSObservation contains only bounded postcondition metadata. Certificate/private-key bytes, endpoints and credentials are forbidden.

type BridgeOriginMTLSOperations 

type BridgeOriginMTLSOperations interface {
	BindOriginMTLS(context.Context, BridgeOriginMTLSApplyPolicy) (BridgeOriginMTLSObservation, error)
	RemoveObsoleteOriginMTLS(context.Context, BridgeOriginMTLSExpectation) (BridgeOriginMTLSObservation, error)
	VerifyOriginMTLS(context.Context, BridgeOriginMTLSExpectation) (BridgeOriginMTLSObservation, error)
}

func NewOSBridgeOriginMTLSOperations 

func NewOSBridgeOriginMTLSOperations(root string) BridgeOriginMTLSOperations

type BridgePublicationApplyPolicy 

type BridgePublicationApplyPolicy struct {
	PolicyDigest        string                                         `json:"policyDigest"`
	StackID             string                                         `json:"stackId"`
	SiteRef             string                                         `json:"siteRef"`
	NodeRef             string                                         `json:"nodeRef"`
	ExecutionChannelRef string                                         `json:"executionChannelRef"`
	EvaluatedAt         string                                         `json:"evaluatedAt"`
	Publications        []architecturev2renderer.BridgePublicationRule `json:"publications"`
}

type BridgePublicationAuthority 

type BridgePublicationAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type BridgePublicationBackendObservation 

type BridgePublicationBackendObservation struct {
	NodeRef       string `json:"nodeRef"`
	InstanceRef   string `json:"instanceRef"`
	HealthGateRef string `json:"healthGateRef"`
	Status        string `json:"status"`
	HTTPStatus    int    `json:"httpStatus,omitempty"`
	ObservedAt    string `json:"observedAt"`
}

type BridgePublicationExecutor 

type BridgePublicationExecutor struct {
	// contains filtered or unexported fields
}

func NewBridgePublicationExecutor 

func NewBridgePublicationExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BridgePublicationAuthority, operations BridgePublicationOperations) *BridgePublicationExecutor

func NewBridgePublicationExecutorWithClock 

func NewBridgePublicationExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority BridgePublicationAuthority, operations BridgePublicationOperations, now func() time.Time) *BridgePublicationExecutor

func (*BridgePublicationExecutor) Execute 

func (e *BridgePublicationExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*BridgePublicationExecutor) Identity 

func (e *BridgePublicationExecutor) Identity() runtimeexecutor.ExecutorIdentity

type BridgePublicationExpectation 

type BridgePublicationExpectation = BridgePublicationApplyPolicy

type BridgePublicationObservation 

type BridgePublicationObservation struct {
	PolicyDigest string                             `json:"policyDigest"`
	Status       string                             `json:"status"`
	EvaluatedAt  string                             `json:"evaluatedAt"`
	ObservedAt   string                             `json:"observedAt"`
	Publications []BridgePublicationRuleObservation `json:"publications"`
}

type BridgePublicationOperations 

type BridgePublicationOperations interface {
	ApplyServicePublications(context.Context, BridgePublicationApplyPolicy) (BridgePublicationObservation, error)
	RemoveObsoleteServicePublications(context.Context, BridgePublicationExpectation) (BridgePublicationObservation, error)
	VerifyServicePublications(context.Context, BridgePublicationExpectation) (BridgePublicationObservation, error)
}

type BridgePublicationRuleObservation 

type BridgePublicationRuleObservation struct {
	ServiceRef               string                                                 `json:"serviceRef"`
	SourceSiteRef            string                                                 `json:"sourceSiteRef"`
	EdgeSiteRef              string                                                 `json:"edgeSiteRef"`
	Host                     string                                                 `json:"host"`
	Protocol                 string                                                 `json:"protocol"`
	Port                     int                                                    `json:"port"`
	Path                     string                                                 `json:"path"`
	TLSMinVersion            string                                                 `json:"tlsMinVersion"`
	AuthPolicyRef            string                                                 `json:"authPolicyRef"`
	OriginIdentityRef        string                                                 `json:"originIdentityRef"`
	RateLimitRequests        int                                                    `json:"rateLimitRequests"`
	RateLimitWindowSeconds   int                                                    `json:"rateLimitWindowSeconds"`
	ModuleRef                string                                                 `json:"moduleRef"`
	UnitRef                  string                                                 `json:"unitRef"`
	OriginNodeRefs           []string                                               `json:"originNodeRefs"`
	OriginInstanceRefs       []string                                               `json:"originInstanceRefs"`
	OriginTargets            []architecturev2renderer.BridgePublicationOriginTarget `json:"originTargets"`
	UpstreamProtocol         string                                                 `json:"upstreamProtocol"`
	TargetPort               int                                                    `json:"targetPort"`
	HealthGateRef            string                                                 `json:"healthGateRef"`
	DataBindingRef           string                                                 `json:"dataBindingRef,omitempty"`
	Authentication           string                                                 `json:"authentication"`
	Privilege                string                                                 `json:"privilege"`
	EnrolledDeviceRequired   bool                                                   `json:"enrolledDeviceRequired"`
	OwnerStepUpRequired      bool                                                   `json:"ownerStepUpRequired"`
	AllowedMethods           []string                                               `json:"allowedMethods"`
	PublicationConfigured    bool                                                   `json:"publicationConfigured"`
	DefaultClosed            bool                                                   `json:"defaultClosed"`
	OriginMTLSRequired       bool                                                   `json:"originMTLSRequired"`
	OriginIdentityBound      bool                                                   `json:"originIdentityBound"`
	TLSPolicyBound           bool                                                   `json:"tlsPolicyBound"`
	AuthenticationBound      bool                                                   `json:"authenticationBound"`
	RateLimitBound           bool                                                   `json:"rateLimitBound"`
	ConfigurationObservedAt  string                                                 `json:"configurationObservedAt"`
	VerifierPolicyObservedAt string                                                 `json:"verifierPolicyObservedAt"`
	TLSPolicyObservedAt      string                                                 `json:"tlsPolicyObservedAt"`
	BackendReadback          []BridgePublicationBackendObservation                  `json:"backendReadback,omitempty"`
}

BridgePublicationRuleObservation contains bounded configuration/readback metadata only. It cannot carry endpoints, credentials or provider handles.

type CloudCoreApplyObservation 

type CloudCoreApplyObservation struct {
	ProjectRef, ArtifactDigest, Status string
	// The Cloud core owns the same local PocketID owner binding as Basement.
	OwnerRef, PocketIDSubject, OwnerBindingDigest string
}

type CloudCoreAuthority 

type CloudCoreAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHashes map[string]string
}

type CloudCoreExecutor 

type CloudCoreExecutor struct {
	// contains filtered or unexported fields
}

func NewCloudCoreExecutor 

func NewCloudCoreExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudCoreAuthority, operations CloudCoreOperations) *CloudCoreExecutor

func NewCloudStandaloneCoreExecutor 

func NewCloudStandaloneCoreExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudCoreAuthority, operations CloudCoreOperations) *CloudCoreExecutor

func (*CloudCoreExecutor) Execute 

func (e *CloudCoreExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudCoreExecutor) Identity 

func (e *CloudCoreExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudCoreOperations 

type CloudCoreOperations interface {
	ApplyProject(context.Context, CloudCoreProject) (CloudCoreApplyObservation, error)
	VerifyProject(context.Context, CloudCoreProject) (CloudCoreVerifyObservation, error)
}

func NewOSCloudCoreOperations 

func NewOSCloudCoreOperations(workspaceRoot string) (CloudCoreOperations, error)

func NewOSCloudStandaloneCoreOperations 

func NewOSCloudStandaloneCoreOperations(workspaceRoot string) (CloudCoreOperations, error)

NewOSCloudStandaloneCoreOperations uses the same lifecycle with separate project and artifact custody; it never adopts an existing PaaS core.

type CloudCoreProject 

type CloudCoreProject struct {
	ModuleRef                                         string
	ProjectRef, SiteRef, NodeRef, ExecutionChannelRef string
	ArtifactID, ArtifactDigest                        string
	Definition                                        []byte
	Services                                          []BasementCoreServiceExpectation
	Health                                            []BasementCoreHealthExpectation
}

type CloudCoreVerifyObservation 

type CloudCoreVerifyObservation struct {
	ProjectRef, ArtifactDigest, Status            string
	OwnerRef, PocketIDSubject, OwnerBindingDigest string
	Services                                      []BasementCoreServiceObservation
	Probes                                        []BasementCoreProbeObservation
}

func VerifyAppliedCloudCore 

func VerifyAppliedCloudCore(ctx context.Context, request runtimeexecutor.ExecutionRequest, expectedBinding LocalTargetBinding, operations CloudCoreOperations) (CloudCoreVerifyObservation, error)

VerifyAppliedCloudCore verifies the exact Cloud core child contract retained in the sealed Product Apply request without executing Apply a second time.

type CloudFirewallPolicy 

type CloudFirewallPolicy struct {
	PolicyDigest         string   `json:"policyDigest"`
	RequestDigest        string   `json:"requestDigest"`
	EvaluatedAt          string   `json:"evaluatedAt"`
	StackID              string   `json:"stackId"`
	SiteRef              string   `json:"siteRef"`
	NodeRef              string   `json:"nodeRef"`
	ExecutionChannelRef  string   `json:"executionChannelRef"`
	Roles                []string `json:"roles"`
	NetworkMode          string   `json:"networkMode"`
	TransportSubnet      string   `json:"transportSubnet"`
	IPv6                 bool     `json:"ipv6"`
	BaseRuleset          string   `json:"baseRuleset"`
	PublicEdgeChain      string   `json:"publicEdgeChain"`
	DefaultIngress       string   `json:"defaultIngress"`
	DeclaredServicesOnly bool     `json:"declaredServicesOnly"`
	BaseIngressRuleRefs  []string `json:"baseIngressRuleRefs"`
	StateDigest          string   `json:"stateDigest"`
}

type CloudHardeningPolicy 

type CloudHardeningPolicy struct {
	PolicyDigest             string `json:"policyDigest"`
	RequestDigest            string `json:"requestDigest"`
	EvaluatedAt              string `json:"evaluatedAt"`
	StackID                  string `json:"stackId"`
	SiteRef                  string `json:"siteRef"`
	NodeRef                  string `json:"nodeRef"`
	ExecutionChannelRef      string `json:"executionChannelRef"`
	Profile                  string `json:"profile"`
	TLSMinVersion            string `json:"tlsMinVersion"`
	SSHKeyOnly               bool   `json:"sshKeyOnly"`
	SSHRootLogin             string `json:"sshRootLogin"`
	BruteForceProtection     string `json:"bruteForceProtection"`
	AutomaticSecurityUpdates string `json:"automaticSecurityUpdates"`
	StateDigest              string `json:"stateDigest"`
}

type CloudHostSecurityApplyObservation 

type CloudHostSecurityApplyObservation struct {
	Operation           string `json:"operation"`
	PolicyDigest        string `json:"policyDigest"`
	RequestDigest       string `json:"requestDigest"`
	StackID             string `json:"stackId"`
	SiteRef             string `json:"siteRef"`
	NodeRef             string `json:"nodeRef"`
	ExecutionChannelRef string `json:"executionChannelRef"`
	EvaluatedAt         string `json:"evaluatedAt"`
	ObservedAt          string `json:"observedAt"`
	StateDigest         string `json:"stateDigest"`
	Status              string `json:"status"`
}

type CloudHostSecurityAuthority 

type CloudHostSecurityAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

CloudHostSecurityAuthority is service-owned catalog authority selected at adapter registration. Request data can never define these hashes.

type CloudHostSecurityEvidence 

type CloudHostSecurityEvidence struct {
	SchemaVersion     string                             `json:"schemaVersion"`
	RequestDigest     string                             `json:"requestDigest"`
	ArtifactDigest    string                             `json:"artifactDigest"`
	PolicyDigest      string                             `json:"policyDigest"`
	EvaluatedAt       string                             `json:"evaluatedAt"`
	FirewallApply     CloudHostSecurityApplyObservation  `json:"firewallApply"`
	FirewallReconcile CloudHostSecurityApplyObservation  `json:"firewallReconcile"`
	HardeningApply    CloudHostSecurityApplyObservation  `json:"hardeningApply"`
	Verify            CloudHostSecurityVerifyObservation `json:"verify"`
}

type CloudHostSecurityEvidenceReceipt 

type CloudHostSecurityEvidenceReceipt struct {
	EvidenceDigest string `json:"evidenceDigest"`
	CommittedAt    string `json:"committedAt"`
}

type CloudHostSecurityExecutor 

type CloudHostSecurityExecutor struct {
	// contains filtered or unexported fields
}

CloudHostSecurityExecutor applies the closed Cloud policy to one previously authorized node. Product registration requires a real authenticated host operations implementation and never discovers one from request data.

func NewCloudHostSecurityExecutor 

func NewCloudHostSecurityExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudHostSecurityAuthority, operations CloudHostSecurityOperations) *CloudHostSecurityExecutor

func NewCloudHostSecurityExecutorWithClock 

func NewCloudHostSecurityExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudHostSecurityAuthority, operations CloudHostSecurityOperations, now func() time.Time) *CloudHostSecurityExecutor

func (*CloudHostSecurityExecutor) Execute 

func (e *CloudHostSecurityExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudHostSecurityExecutor) Identity 

func (e *CloudHostSecurityExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudHostSecurityOperations 

type CloudHostSecurityOperations interface {
	ApplyFirewall(context.Context, CloudFirewallPolicy) (CloudHostSecurityApplyObservation, error)
	ReconcileFirewall(context.Context, CloudFirewallPolicy) (CloudHostSecurityApplyObservation, error)
	ApplyHardening(context.Context, CloudHardeningPolicy) (CloudHostSecurityApplyObservation, error)
	VerifyHostSecurity(context.Context, CloudHostSecurityVerifyExpectation) (CloudHostSecurityVerifyObservation, error)
	CommitEvidence(context.Context, CloudHostSecurityEvidence) (CloudHostSecurityEvidenceReceipt, error)
}

CloudHostSecurityOperations is implemented by the authenticated execution channel owner. It intentionally exposes neither generic shell execution nor provider, endpoint, credential, discovery, or server-lifecycle operations.

type CloudHostSecurityVerifyExpectation 

type CloudHostSecurityVerifyExpectation struct {
	StackID                  string   `json:"stackId"`
	SiteRef                  string   `json:"siteRef"`
	NodeRef                  string   `json:"nodeRef"`
	ExecutionChannelRef      string   `json:"executionChannelRef"`
	PolicyDigest             string   `json:"policyDigest"`
	RequestDigest            string   `json:"requestDigest"`
	ArtifactDigest           string   `json:"artifactDigest"`
	EvaluatedAt              string   `json:"evaluatedAt"`
	NetworkMode              string   `json:"networkMode"`
	TransportSubnet          string   `json:"transportSubnet"`
	IPv6                     bool     `json:"ipv6"`
	BaseRuleset              string   `json:"baseRuleset"`
	PublicEdgeChain          string   `json:"publicEdgeChain"`
	DefaultIngress           string   `json:"defaultIngress"`
	DeclaredServicesOnly     bool     `json:"declaredServicesOnly"`
	BaseIngressRuleRefs      []string `json:"baseIngressRuleRefs"`
	FirewallStateDigest      string   `json:"firewallStateDigest"`
	HardeningProfile         string   `json:"hardeningProfile"`
	TLSMinVersion            string   `json:"tlsMinVersion"`
	SSHKeyOnly               bool     `json:"sshKeyOnly"`
	SSHRootLogin             string   `json:"sshRootLogin"`
	BruteForceProtection     string   `json:"bruteForceProtection"`
	AutomaticSecurityUpdates string   `json:"automaticSecurityUpdates"`
	HardeningStateDigest     string   `json:"hardeningStateDigest"`
}

type CloudHostSecurityVerifyObservation 

type CloudHostSecurityVerifyObservation struct {
	PolicyDigest               string   `json:"policyDigest"`
	RequestDigest              string   `json:"requestDigest"`
	StackID                    string   `json:"stackId"`
	SiteRef                    string   `json:"siteRef"`
	NodeRef                    string   `json:"nodeRef"`
	ExecutionChannelRef        string   `json:"executionChannelRef"`
	EvaluatedAt                string   `json:"evaluatedAt"`
	ObservedAt                 string   `json:"observedAt"`
	Status                     string   `json:"status"`
	FirewallStatus             string   `json:"firewallStatus"`
	FirewallStateDigest        string   `json:"firewallStateDigest"`
	NetworkMode                string   `json:"networkMode"`
	TransportSubnet            string   `json:"transportSubnet"`
	IPv6                       bool     `json:"ipv6"`
	BaseRuleset                string   `json:"baseRuleset"`
	PublicEdgeChain            string   `json:"publicEdgeChain"`
	DefaultIngress             string   `json:"defaultIngress"`
	DeclaredServicesOnly       bool     `json:"declaredServicesOnly"`
	BaseIngressRuleRefs        []string `json:"baseIngressRuleRefs"`
	UnauthorizedExceptionCount int      `json:"unauthorizedExceptionCount"`
	HardeningStatus            string   `json:"hardeningStatus"`
	HardeningStateDigest       string   `json:"hardeningStateDigest"`
	HardeningProfile           string   `json:"hardeningProfile"`
	TLSMinVersion              string   `json:"tlsMinVersion"`
	SSHKeyOnly                 bool     `json:"sshKeyOnly"`
	SSHRootLogin               string   `json:"sshRootLogin"`
	BruteForceProtection       string   `json:"bruteForceProtection"`
	AutomaticSecurityUpdates   string   `json:"automaticSecurityUpdates"`
}

type CloudIdentityTrustApplyObservation 

type CloudIdentityTrustApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type CloudIdentityTrustPolicyAuthority 

type CloudIdentityTrustPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type CloudIdentityTrustPolicyBinding 

type CloudIdentityTrustPolicyBinding struct {
	SiteRefs            []string
	NodeRefs            []string
	ExecutionChannelRef string
}

type CloudIdentityTrustPolicyExecutor 

type CloudIdentityTrustPolicyExecutor struct {
	// contains filtered or unexported fields
}

CloudIdentityTrustPolicyExecutor is isolated from product registration until an authenticated backend and the matching CUE owner transition exist.

func NewCloudIdentityTrustPolicyExecutor 

func NewCloudIdentityTrustPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding CloudIdentityTrustPolicyBinding, authority CloudIdentityTrustPolicyAuthority, operations CloudIdentityTrustPolicyOperations) *CloudIdentityTrustPolicyExecutor

func (*CloudIdentityTrustPolicyExecutor) Execute 

func (e *CloudIdentityTrustPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudIdentityTrustPolicyExecutor) Identity 

func (e *CloudIdentityTrustPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudIdentityTrustPolicyOperations 

type CloudIdentityTrustPolicyOperations interface {
	ConfigureHumanCredentialIssuer(context.Context, CloudIdentityTrustRuntimePolicy) (CloudIdentityTrustApplyObservation, error)
	ConfigureWorkloadCredentialIssuer(context.Context, CloudIdentityTrustRuntimePolicy) (CloudIdentityTrustApplyObservation, error)
	EnforceDeviceSessionVerification(context.Context, CloudIdentityTrustRuntimePolicy) (CloudIdentityTrustApplyObservation, error)
	EnforceHumanSessionVerification(context.Context, CloudIdentityTrustRuntimePolicy) (CloudIdentityTrustApplyObservation, error)
	EnforceWorkloadIdentityVerification(context.Context, CloudIdentityTrustRuntimePolicy) (CloudIdentityTrustApplyObservation, error)
	VerifyCloudIdentityTrustPolicy(context.Context, CloudIdentityTrustVerifyExpectation) (CloudIdentityTrustVerifyObservation, error)
}

CloudIdentityTrustPolicyOperations is the exact Cloud trust capability. It cannot enroll or issue device credentials and exposes no generic signing, key, credential, endpoint, provider, network, or lifecycle API.

type CloudIdentityTrustRuntimePolicy 

type CloudIdentityTrustRuntimePolicy struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	Issuers      []architecturev2renderer.CloudIdentityTrustIssuer
	Verifiers    []architecturev2renderer.CloudIdentityTrustVerifier
}

type CloudIdentityTrustVerifyExpectation 

type CloudIdentityTrustVerifyExpectation struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	IssuerIDs    []string
	VerifierIDs  []string
	NotBefore    time.Time
}

type CloudIdentityTrustVerifyObservation 

type CloudIdentityTrustVerifyObservation struct {
	PolicyDigest           string `json:"policyDigest"`
	Status                 string `json:"status"`
	HumanIssuerStatus      string `json:"humanIssuerStatus"`
	WorkloadIssuerStatus   string `json:"workloadIssuerStatus"`
	DeviceVerifierStatus   string `json:"deviceVerifierStatus"`
	HumanVerifierStatus    string `json:"humanVerifierStatus"`
	WorkloadVerifierStatus string `json:"workloadVerifierStatus"`
	ObservedAt             string `json:"observedAt"`
}

type CloudOffsiteBackupApplyPolicy 

type CloudOffsiteBackupApplyPolicy struct {
	PolicyDigest           string `json:"policyDigest"`
	RequestDigest          string `json:"requestDigest"`
	ArtifactDigest         string `json:"artifactDigest"`
	StateDigest            string `json:"stateDigest"`
	EvaluatedAt            string `json:"evaluatedAt"`
	StackID                string `json:"stackId"`
	SiteRef                string `json:"siteRef"`
	NodeRef                string `json:"nodeRef"`
	ExecutionChannelRef    string `json:"executionChannelRef"`
	CapabilityRef          string `json:"capabilityRef"`
	ContractOwnerRef       string `json:"contractOwnerRef"`
	CapabilityContractHash string `json:"capabilityContractHash"`
	RequirementsHash       string `json:"requirementsHash"`
	BindingRef             string `json:"bindingRef"`
	BindingHash            string `json:"bindingHash"`
	BackupTargetRef        string `json:"backupTargetRef"`
	CustodyAttestationRef  string `json:"custodyAttestationRef"`
	StackKitsVersion       string `json:"stackkitsVersion"`
	CandidateDigest        string `json:"candidateDigest"`
	SpecHash               string `json:"specHash"`
	ValidUntil             string `json:"validUntil"`
}

type CloudOffsiteBackupAuthority 

type CloudOffsiteBackupAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type CloudOffsiteBackupEvidence 

type CloudOffsiteBackupEvidence struct {
	SchemaVersion  string                        `json:"schemaVersion"`
	RequestDigest  string                        `json:"requestDigest"`
	ArtifactDigest string                        `json:"artifactDigest"`
	PolicyDigest   string                        `json:"policyDigest"`
	StateDigest    string                        `json:"stateDigest"`
	EvaluatedAt    string                        `json:"evaluatedAt"`
	Apply          CloudOffsiteBackupObservation `json:"apply"`
	Reconcile      CloudOffsiteBackupObservation `json:"reconcile"`
	Verify         CloudOffsiteBackupObservation `json:"verify"`
}

type CloudOffsiteBackupEvidenceReceipt 

type CloudOffsiteBackupEvidenceReceipt struct {
	EvidenceDigest string `json:"evidenceDigest"`
	CommittedAt    string `json:"committedAt"`
}

type CloudOffsiteBackupExecutor 

type CloudOffsiteBackupExecutor struct {
	// contains filtered or unexported fields
}

func NewCloudOffsiteBackupExecutor 

func NewCloudOffsiteBackupExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudOffsiteBackupAuthority, operations CloudOffsiteBackupOperations) *CloudOffsiteBackupExecutor

func NewCloudOffsiteBackupExecutorWithClock 

func NewCloudOffsiteBackupExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudOffsiteBackupAuthority, operations CloudOffsiteBackupOperations, now func() time.Time) *CloudOffsiteBackupExecutor

func (*CloudOffsiteBackupExecutor) Execute 

func (e *CloudOffsiteBackupExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudOffsiteBackupExecutor) Identity 

func (e *CloudOffsiteBackupExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudOffsiteBackupExpectation 

type CloudOffsiteBackupExpectation struct {
	PolicyDigest          string `json:"policyDigest"`
	RequestDigest         string `json:"requestDigest"`
	ArtifactDigest        string `json:"artifactDigest"`
	StateDigest           string `json:"stateDigest"`
	EvaluatedAt           string `json:"evaluatedAt"`
	StackID               string `json:"stackId"`
	SiteRef               string `json:"siteRef"`
	NodeRef               string `json:"nodeRef"`
	ExecutionChannelRef   string `json:"executionChannelRef"`
	BindingRef            string `json:"bindingRef"`
	BindingHash           string `json:"bindingHash"`
	BackupTargetRef       string `json:"backupTargetRef"`
	CustodyAttestationRef string `json:"custodyAttestationRef"`
	ValidUntil            string `json:"validUntil"`
}

type CloudOffsiteBackupObservation 

type CloudOffsiteBackupObservation struct {
	Operation               string `json:"operation"`
	PolicyDigest            string `json:"policyDigest"`
	RequestDigest           string `json:"requestDigest"`
	ArtifactDigest          string `json:"artifactDigest"`
	StateDigest             string `json:"stateDigest"`
	EvaluatedAt             string `json:"evaluatedAt"`
	ObservedAt              string `json:"observedAt"`
	StackID                 string `json:"stackId"`
	SiteRef                 string `json:"siteRef"`
	NodeRef                 string `json:"nodeRef"`
	ExecutionChannelRef     string `json:"executionChannelRef"`
	BindingRef              string `json:"bindingRef"`
	BindingHash             string `json:"bindingHash"`
	BackupTargetRef         string `json:"backupTargetRef"`
	CustodyAttestationRef   string `json:"custodyAttestationRef"`
	Status                  string `json:"status"`
	ObsoleteBindings        int    `json:"obsoleteBindings"`
	BackupObservationRef    string `json:"backupObservationRef,omitempty"`
	BackupObservationDigest string `json:"backupObservationDigest,omitempty"`
	RestoreReadbackRef      string `json:"restoreReadbackRef,omitempty"`
	RestoreReadbackDigest   string `json:"restoreReadbackDigest,omitempty"`
}

type CloudOffsiteBackupOperations 

type CloudOffsiteBackupOperations interface {
	BindOffsiteBackupTarget(context.Context, CloudOffsiteBackupApplyPolicy) (CloudOffsiteBackupObservation, error)
	RemoveObsoleteOffsiteBackupBindings(context.Context, CloudOffsiteBackupExpectation) (CloudOffsiteBackupObservation, error)
	VerifyOffsiteBackupTarget(context.Context, CloudOffsiteBackupExpectation) (CloudOffsiteBackupObservation, error)
	CommitCloudOffsiteBackupEvidence(context.Context, CloudOffsiteBackupEvidence) (CloudOffsiteBackupEvidenceReceipt, error)
}

CloudOffsiteBackupOperations is implemented by an authenticated Cloud host channel. It owns target access and backup tooling; StackKits supplies only the exact opaque target/custody policy and verifies returned evidence.

func NewOSCloudOffsiteBackupOperations 

func NewOSCloudOffsiteBackupOperations(workspace string, resolve CloudOffsiteBackupSourceResolver) (CloudOffsiteBackupOperations, error)

type CloudOffsiteBackupSourceResolver 

type CloudOffsiteBackupSourceResolver func(context.Context) (localbackuppolicy.Policy, backupcustody.S3TargetAuthority, error)

CloudOffsiteBackupSourceResolver reloads the current verified Plan and its signed local owner/source binding. Endpoint and credentials never enter it.

type CloudPublicEdgeApplyPolicy 

type CloudPublicEdgeApplyPolicy struct {
	PolicyDigest        string                                        `json:"policyDigest"`
	RequestDigest       string                                        `json:"requestDigest"`
	ArtifactDigest      string                                        `json:"artifactDigest"`
	StateDigest         string                                        `json:"stateDigest"`
	EvaluatedAt         string                                        `json:"evaluatedAt"`
	StackID             string                                        `json:"stackId"`
	SiteRef             string                                        `json:"siteRef"`
	NodeRef             string                                        `json:"nodeRef"`
	ExecutionChannelRef string                                        `json:"executionChannelRef"`
	NetworkMode         string                                        `json:"networkMode"`
	TransportSubnet     string                                        `json:"transportSubnet"`
	IPv6                bool                                          `json:"ipv6"`
	TLSMinVersion       string                                        `json:"tlsMinVersion"`
	ParentRulesetRef    string                                        `json:"parentRulesetRef"`
	DelegatedChainRef   string                                        `json:"delegatedChainRef"`
	Routes              []architecturev2renderer.CloudPublicEdgeRoute `json:"routes"`
}

type CloudPublicEdgeAuthority 

type CloudPublicEdgeAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type CloudPublicEdgeEvidence 

type CloudPublicEdgeEvidence struct {
	SchemaVersion  string                     `json:"schemaVersion"`
	RequestDigest  string                     `json:"requestDigest"`
	ArtifactDigest string                     `json:"artifactDigest"`
	PolicyDigest   string                     `json:"policyDigest"`
	StateDigest    string                     `json:"stateDigest"`
	EvaluatedAt    string                     `json:"evaluatedAt"`
	Apply          CloudPublicEdgeObservation `json:"apply"`
	Reconcile      CloudPublicEdgeObservation `json:"reconcile"`
	Verify         CloudPublicEdgeObservation `json:"verify"`
}

type CloudPublicEdgeEvidenceReceipt 

type CloudPublicEdgeEvidenceReceipt struct {
	EvidenceDigest string `json:"evidenceDigest"`
	CommittedAt    string `json:"committedAt"`
}

type CloudPublicEdgeExecutor 

type CloudPublicEdgeExecutor struct {
	// contains filtered or unexported fields
}

func NewCloudPublicEdgeExecutor 

func NewCloudPublicEdgeExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudPublicEdgeAuthority, operations CloudPublicEdgeOperations) *CloudPublicEdgeExecutor

func NewCloudPublicEdgeExecutorWithClock 

func NewCloudPublicEdgeExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudPublicEdgeAuthority, operations CloudPublicEdgeOperations, now func() time.Time) *CloudPublicEdgeExecutor

func (*CloudPublicEdgeExecutor) Execute 

func (e *CloudPublicEdgeExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudPublicEdgeExecutor) Identity 

func (e *CloudPublicEdgeExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudPublicEdgeExpectation 

type CloudPublicEdgeExpectation struct {
	PolicyDigest        string   `json:"policyDigest"`
	RequestDigest       string   `json:"requestDigest"`
	ArtifactDigest      string   `json:"artifactDigest"`
	StateDigest         string   `json:"stateDigest"`
	EvaluatedAt         string   `json:"evaluatedAt"`
	StackID             string   `json:"stackId"`
	SiteRef             string   `json:"siteRef"`
	NodeRef             string   `json:"nodeRef"`
	ExecutionChannelRef string   `json:"executionChannelRef"`
	ParentRulesetRef    string   `json:"parentRulesetRef"`
	DelegatedChainRef   string   `json:"delegatedChainRef"`
	RouteRefs           []string `json:"routeRefs"`
	BackendPoolRefs     []string `json:"backendPoolRefs"`
	HealthGateRefs      []string `json:"healthGateRefs"`
}

type CloudPublicEdgeObservation 

type CloudPublicEdgeObservation struct {
	Operation           string   `json:"operation"`
	PolicyDigest        string   `json:"policyDigest"`
	RequestDigest       string   `json:"requestDigest"`
	ArtifactDigest      string   `json:"artifactDigest"`
	StateDigest         string   `json:"stateDigest"`
	StackID             string   `json:"stackId"`
	SiteRef             string   `json:"siteRef"`
	NodeRef             string   `json:"nodeRef"`
	ExecutionChannelRef string   `json:"executionChannelRef"`
	EvaluatedAt         string   `json:"evaluatedAt"`
	ObservedAt          string   `json:"observedAt"`
	ParentRulesetRef    string   `json:"parentRulesetRef"`
	DelegatedChainRef   string   `json:"delegatedChainRef"`
	Status              string   `json:"status"`
	RouteRefs           []string `json:"routeRefs"`
	BackendPoolRefs     []string `json:"backendPoolRefs"`
	HealthGateRefs      []string `json:"healthGateRefs"`
	DefaultClosed       bool     `json:"defaultClosed"`
	UnauthorizedRoutes  int      `json:"unauthorizedRoutes"`
}

type CloudPublicEdgeOperations 

type CloudPublicEdgeOperations interface {
	ApplyPublicEdge(context.Context, CloudPublicEdgeApplyPolicy) (CloudPublicEdgeObservation, error)
	RemoveObsoletePublicEdge(context.Context, CloudPublicEdgeExpectation) (CloudPublicEdgeObservation, error)
	VerifyPublicEdge(context.Context, CloudPublicEdgeExpectation) (CloudPublicEdgeObservation, error)
	CommitEvidence(context.Context, CloudPublicEdgeEvidence) (CloudPublicEdgeEvidenceReceipt, error)
}

CloudPublicEdgeOperations is owned by an authenticated Cloud host channel. It exposes exact edge-policy reconciliation and durable evidence custody, never provider resources, DNS mutation, certificate issuance or secrets.

type CloudreveSelectedPaaSExecutor 

type CloudreveSelectedPaaSExecutor struct {
	// contains filtered or unexported fields
}

func NewCloudreveSelectedPaaSExecutor 

func NewCloudreveSelectedPaaSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority CloudreveWorkloadAuthority, operations SelectedPaaSWorkloadOperations) *CloudreveSelectedPaaSExecutor

func (*CloudreveSelectedPaaSExecutor) Execute 

func (e *CloudreveSelectedPaaSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CloudreveSelectedPaaSExecutor) Identity 

func (e *CloudreveSelectedPaaSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CloudreveWorkloadAuthority 

type CloudreveWorkloadAuthority = SelectedPaaSWorkloadAuthority

type Command 

type Command struct {
	Executable string
	Args       []string
	Dir        string
	Env        []string
	Stdin      []byte
}

Command is the closed host-process capability used by the local adapter. The executor never accepts an executable, environment, directory, or argument from an ExecutionRequest.

type CommandRunner 

type CommandRunner interface {
	Run(context.Context, Command) error
}

CommandRunner allows bounded process execution to be replaced in tests.

type ComposeApplyObservation 

type ComposeApplyObservation struct {
	ProjectRef     string `json:"projectRef"`
	ArtifactDigest string `json:"artifactDigest"`
	Status         string `json:"status"`
}

type ComposeProject 

type ComposeProject struct {
	ProjectRef          string
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
	ArtifactID          string
	ArtifactDigest      string
	Definition          []byte
	Service             ComposeServiceExpectation
}

ComposeProject is the closed operation input for one already-authorized local Compose target. It contains no provider, endpoint, credential, workspace path, executable, argument, or discovery authority.

type ComposeServiceExpectation 

type ComposeServiceExpectation struct {
	Ref         string
	ImageRef    string
	ImageDigest string
}

type ComposeServiceObservation 

type ComposeServiceObservation struct {
	Ref         string `json:"ref"`
	ImageRef    string `json:"imageRef"`
	ImageDigest string `json:"imageDigest"`
	Status      string `json:"status"`
	Health      string `json:"health"`
}

type ComposeVerifyObservation 

type ComposeVerifyObservation struct {
	ProjectRef     string                      `json:"projectRef"`
	ArtifactDigest string                      `json:"artifactDigest"`
	Status         string                      `json:"status"`
	Services       []ComposeServiceObservation `json:"services"`
}

type CoreHostBootstrapExecutor 

type CoreHostBootstrapExecutor struct {
	// contains filtered or unexported fields
}

CoreHostBootstrapExecutor applies one exact node-local CUE policy to the host already bound by the caller. Multi-node dispatch belongs to a future execution-channel router, not this adapter.

func NewCoreHostBootstrapExecutor 

func NewCoreHostBootstrapExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, host CoreHostBootstrapOperations) *CoreHostBootstrapExecutor

func (*CoreHostBootstrapExecutor) Execute 

func (e *CoreHostBootstrapExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*CoreHostBootstrapExecutor) Identity 

func (e *CoreHostBootstrapExecutor) Identity() runtimeexecutor.ExecutorIdentity

type CoreHostBootstrapOperations 

type CoreHostBootstrapOperations interface {
	EnsureDirectory(context.Context, string, fs.FileMode) error
	ObserveRuntime(context.Context, RuntimeExpectation) (RuntimeObservation, error)
}

CoreHostBootstrapOperations is a closed host capability. It deliberately has no generic command, package-manager, network, provider, or file-write method.

func NewOSCoreHostBootstrapOperations 

func NewOSCoreHostBootstrapOperations() CoreHostBootstrapOperations

NewOSCoreHostBootstrapOperations explicitly selects the local operating system as the closed Core host-bootstrap capability owner. Merely creating an executor does not grant this authority; product composition must opt in.

type FederationControlAgentApplyPolicy 

type FederationControlAgentApplyPolicy struct {
	PolicyDigest        string                                                 `json:"policyDigest"`
	StackID             string                                                 `json:"stackId"`
	SiteRef             string                                                 `json:"siteRef"`
	NodeRef             string                                                 `json:"nodeRef"`
	SiteKind            string                                                 `json:"siteKind"`
	ExecutionChannelRef string                                                 `json:"executionChannelRef"`
	EvaluatedAt         string                                                 `json:"evaluatedAt"`
	ContractHash        string                                                 `json:"contractHash"`
	Actions             []architecturev2renderer.FederationControlAgentAction  `json:"actions"`
	Partition           architecturev2renderer.FederationControlAgentPartition `json:"partition"`
}

FederationControlAgentApplyPolicy is the exact material-free outbound control policy handed to a service-owned Operations implementation. It has no endpoint, credential, tunnel, provider, lease, or LAN authority.

type FederationControlAgentAuthority 

type FederationControlAgentAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type FederationControlAgentExecutor 

type FederationControlAgentExecutor struct {
	// contains filtered or unexported fields
}

func NewFederationControlAgentExecutor 

func NewFederationControlAgentExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority FederationControlAgentAuthority, operations FederationControlAgentOperations) *FederationControlAgentExecutor

func NewFederationControlAgentExecutorWithClock 

func NewFederationControlAgentExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority FederationControlAgentAuthority, operations FederationControlAgentOperations, now func() time.Time) *FederationControlAgentExecutor

func (*FederationControlAgentExecutor) Execute 

func (e *FederationControlAgentExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*FederationControlAgentExecutor) Identity 

func (e *FederationControlAgentExecutor) Identity() runtimeexecutor.ExecutorIdentity

type FederationControlAgentExpectation 

type FederationControlAgentExpectation = FederationControlAgentApplyPolicy

type FederationControlAgentObservation 

type FederationControlAgentObservation struct {
	PolicyDigest                    string                                                `json:"policyDigest"`
	Status                          string                                                `json:"status"`
	EvaluatedAt                     string                                                `json:"evaluatedAt"`
	ObservedAt                      string                                                `json:"observedAt"`
	ConfigurationObservedAt         string                                                `json:"configurationObservedAt"`
	StackID                         string                                                `json:"stackId"`
	SiteRef                         string                                                `json:"siteRef"`
	NodeRef                         string                                                `json:"nodeRef"`
	SiteKind                        string                                                `json:"siteKind"`
	ExecutionChannelRef             string                                                `json:"executionChannelRef"`
	ContractHash                    string                                                `json:"contractHash"`
	Actions                         []architecturev2renderer.FederationControlAgentAction `json:"actions"`
	OnCloudLoss                     string                                                `json:"onCloudLoss"`
	OnLinkLoss                      string                                                `json:"onLinkLoss"`
	CloudEdge                       string                                                `json:"cloudEdge"`
	MaxStaleVerificationSeconds     int                                                   `json:"maxStaleVerificationSeconds"`
	LocalIdentityAuthorityAvailable bool                                                  `json:"localIdentityAuthorityAvailable"`
	DenyNewCrossSiteSessions        bool                                                  `json:"denyNewCrossSiteSessions"`
	OutboundOnly                    bool                                                  `json:"outboundOnly"`
	InboundCloudToHomeAllowed       bool                                                  `json:"inboundCloudToHomeAllowed"`
	GeneralLANAccess                bool                                                  `json:"generalLANAccess"`
	LocalAuthorityContinues         bool                                                  `json:"localAuthorityContinues"`
	NewCrossSiteSessionsFailClosed  bool                                                  `json:"newCrossSiteSessionsFailClosed"`
}

FederationControlAgentObservation is a bounded configuration/readback receipt. The Operations owner retains all transport and credential custody.

type FederationControlAgentOperations 

type FederationControlAgentOperations interface {
	BindOutboundControlAgent(context.Context, FederationControlAgentApplyPolicy) (FederationControlAgentObservation, error)
	RemoveObsoleteOutboundControlAgent(context.Context, FederationControlAgentExpectation) (FederationControlAgentObservation, error)
	VerifyOutboundControlAgent(context.Context, FederationControlAgentExpectation) (FederationControlAgentObservation, error)
}

type FederationLinkApplyPolicy 

type FederationLinkApplyPolicy struct {
	PolicyDigest        string                                               `json:"policyDigest"`
	StackID             string                                               `json:"stackId"`
	SiteRef             string                                               `json:"siteRef"`
	NodeRef             string                                               `json:"nodeRef"`
	SiteKind            string                                               `json:"siteKind"`
	ExecutionChannelRef string                                               `json:"executionChannelRef"`
	EvaluatedAt         string                                               `json:"evaluatedAt"`
	HomeSiteRefs        []string                                             `json:"homeSiteRefs"`
	CloudSiteRefs       []string                                             `json:"cloudSiteRefs"`
	Overlay             architecturev2renderer.FederationLinkOverlayPolicy   `json:"overlay"`
	Partition           architecturev2renderer.FederationLinkPartitionPolicy `json:"partition"`
	Binding             architecturev2renderer.FederationLinkBindingPolicy   `json:"binding"`
}

FederationLinkApplyPolicy is the exact provider-free Site/node policy passed to the construction-owned link implementation. The opaque fabric and custody references are handles into that implementation's private custody; no endpoint, credential, provider resource, lease, or general LAN authority crosses this boundary.

type FederationLinkAuthority 

type FederationLinkAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type FederationLinkExecutor 

type FederationLinkExecutor struct {
	// contains filtered or unexported fields
}

func NewFederationLinkExecutor 

func NewFederationLinkExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority FederationLinkAuthority, operations FederationLinkOperations) *FederationLinkExecutor

func NewFederationLinkExecutorWithClock 

func NewFederationLinkExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority FederationLinkAuthority, operations FederationLinkOperations, now func() time.Time) *FederationLinkExecutor

func (*FederationLinkExecutor) Execute 

func (e *FederationLinkExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*FederationLinkExecutor) Identity 

func (e *FederationLinkExecutor) Identity() runtimeexecutor.ExecutorIdentity

type FederationLinkExpectation 

type FederationLinkExpectation = FederationLinkApplyPolicy

type FederationLinkObservation 

type FederationLinkObservation struct {
	PolicyDigest                    string   `json:"policyDigest"`
	Status                          string   `json:"status"`
	EvaluatedAt                     string   `json:"evaluatedAt"`
	ObservedAt                      string   `json:"observedAt"`
	ConfigurationObservedAt         string   `json:"configurationObservedAt"`
	StackID                         string   `json:"stackId"`
	SiteRef                         string   `json:"siteRef"`
	NodeRef                         string   `json:"nodeRef"`
	SiteKind                        string   `json:"siteKind"`
	ExecutionChannelRef             string   `json:"executionChannelRef"`
	BindingRef                      string   `json:"bindingRef"`
	FabricRef                       string   `json:"fabricRef"`
	CustodyAttestationRef           string   `json:"custodyAttestationRef"`
	RequirementsHash                string   `json:"requirementsHash"`
	BindingHash                     string   `json:"bindingHash"`
	BridgeContractHash              string   `json:"bridgeContractHash"`
	BindingIssuedAt                 string   `json:"bindingIssuedAt"`
	BindingValidUntil               string   `json:"bindingValidUntil"`
	HomeSiteRefs                    []string `json:"homeSiteRefs"`
	CloudSiteRefs                   []string `json:"cloudSiteRefs"`
	PeerSiteRefs                    []string `json:"peerSiteRefs"`
	OverlayContractRef              string   `json:"overlayContractRef"`
	Implementation                  string   `json:"implementation"`
	Initiation                      string   `json:"initiation"`
	TrafficMode                     string   `json:"trafficMode"`
	OnCloudLoss                     string   `json:"onCloudLoss"`
	OnLinkLoss                      string   `json:"onLinkLoss"`
	CloudEdge                       string   `json:"cloudEdge"`
	MaxStaleVerificationSeconds     int      `json:"maxStaleVerificationSeconds"`
	LocalIdentityAuthorityAvailable bool     `json:"localIdentityAuthorityAvailable"`
	DenyNewCrossSiteSessions        bool     `json:"denyNewCrossSiteSessions"`
	LocalAgentConfigured            bool     `json:"localAgentConfigured"`
	PeerAuthenticated               bool     `json:"peerAuthenticated"`
	CustodyVerified                 bool     `json:"custodyVerified"`
	InitiatesLink                   bool     `json:"initiatesLink"`
	AcceptsOnlyAuthenticatedPeers   bool     `json:"acceptsOnlyAuthenticatedPeers"`
	OutboundEstablished             bool     `json:"outboundEstablished"`
	DeclaredFlowsOnly               bool     `json:"declaredFlowsOnly"`
	DefaultDeny                     bool     `json:"defaultDeny"`
	DefaultRouteAdvertised          bool     `json:"defaultRouteAdvertised"`
	PrivateSubnetsAdvertised        bool     `json:"privateSubnetsAdvertised"`
	BroadRoutesAllowed              bool     `json:"broadRoutesAllowed"`
	GeneralLANAccess                bool     `json:"generalLANAccess"`
	InboundHomeAccessAllowed        bool     `json:"inboundHomeAccessAllowed"`
	LocalAuthorityContinues         bool     `json:"localAuthorityContinues"`
	NewCrossSiteSessionsFailClosed  bool     `json:"newCrossSiteSessionsFailClosed"`
}

FederationLinkObservation is a bounded local configuration/readback receipt. It deliberately contains no address, endpoint, key, token, provider handle, lease, or transport implementation detail.

type FederationLinkOperations 

type FederationLinkOperations interface {
	EstablishInterSiteLink(context.Context, FederationLinkApplyPolicy) (FederationLinkObservation, error)
	RemoveObsoleteInterSiteLink(context.Context, FederationLinkExpectation) (FederationLinkObservation, error)
	VerifyInterSiteLink(context.Context, FederationLinkExpectation) (FederationLinkObservation, error)
}

type HAAvailabilityApplyPolicy 

type HAAvailabilityApplyPolicy struct {
	PolicyDigest        string                                        `json:"policyDigest"`
	RequestDigest       string                                        `json:"requestDigest"`
	ArtifactDigest      string                                        `json:"artifactDigest"`
	StateDigest         string                                        `json:"stateDigest"`
	EvaluatedAt         string                                        `json:"evaluatedAt"`
	StackID             string                                        `json:"stackId"`
	KitSlug             string                                        `json:"kitSlug"`
	ModuleRef           string                                        `json:"moduleRef"`
	SiteRef             string                                        `json:"siteRef"`
	NodeRef             string                                        `json:"nodeRef"`
	ExecutionChannelRef string                                        `json:"executionChannelRef"`
	Policy              architecturev2renderer.HAAvailabilityPolicy   `json:"policy"`
	FailureModel        architecturev2renderer.HAFailureModel         `json:"failureModel"`
	Members             []architecturev2renderer.HAAvailabilityMember `json:"members"`
}

HAAvailabilityApplyPolicy is the complete secret-free decision handed to one authenticated member-local implementation. Provider APIs, credentials, endpoints, transport selection, general LAN, and failover authority are not representable here.

type HAAvailabilityAuthority 

type HAAvailabilityAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type HAAvailabilityExecutor 

type HAAvailabilityExecutor struct {
	// contains filtered or unexported fields
}

func NewHAAvailabilityExecutor 

func NewHAAvailabilityExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority HAAvailabilityAuthority, moduleRef string, operations HAAvailabilityOperations) *HAAvailabilityExecutor

func NewHAAvailabilityExecutorWithClock 

func NewHAAvailabilityExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority HAAvailabilityAuthority, moduleRef string, operations HAAvailabilityOperations, now func() time.Time) *HAAvailabilityExecutor

func (*HAAvailabilityExecutor) Execute 

func (e *HAAvailabilityExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*HAAvailabilityExecutor) Identity 

func (e *HAAvailabilityExecutor) Identity() runtimeexecutor.ExecutorIdentity

type HAAvailabilityExpectation 

type HAAvailabilityExpectation = HAAvailabilityApplyPolicy

type HAAvailabilityMemberReadback 

type HAAvailabilityMemberReadback struct {
	NodeRef       string `json:"nodeRef"`
	SiteRef       string `json:"siteRef"`
	FailureDomain string `json:"failureDomain"`
	Ready         bool   `json:"ready"`
}

HAAvailabilityMemberReadback proves the exact compiler-selected member and failure-domain set. No replacement or discovered member can enter evidence.

type HAAvailabilityObservation 

type HAAvailabilityObservation struct {
	Operation           string                         `json:"operation"`
	Status              string                         `json:"status"`
	PolicyDigest        string                         `json:"policyDigest"`
	RequestDigest       string                         `json:"requestDigest"`
	ArtifactDigest      string                         `json:"artifactDigest"`
	StateDigest         string                         `json:"stateDigest"`
	EvaluatedAt         string                         `json:"evaluatedAt"`
	ObservedAt          string                         `json:"observedAt"`
	StackID             string                         `json:"stackId"`
	KitSlug             string                         `json:"kitSlug"`
	ModuleRef           string                         `json:"moduleRef"`
	SiteRef             string                         `json:"siteRef"`
	NodeRef             string                         `json:"nodeRef"`
	ExecutionChannelRef string                         `json:"executionChannelRef"`
	Mode                string                         `json:"mode"`
	PolicyRef           string                         `json:"policyRef"`
	RealizationRef      string                         `json:"realizationRef"`
	Fencing             string                         `json:"fencing"`
	FailureDomainSpread int                            `json:"failureDomainSpread"`
	PartitionBehavior   string                         `json:"partitionBehavior"`
	Members             []HAAvailabilityMemberReadback `json:"members"`
	FencingReady        bool                           `json:"fencingReady"`
	ProviderAuthority   bool                           `json:"providerAuthority"`
	WANQuorum           bool                           `json:"wanQuorum"`
	GeneralLANAuthority bool                           `json:"generalLanAuthority"`
	IndependentFailover bool                           `json:"independentFailover"`
}

HAAvailabilityObservation is the closed apply/remove/verify evidence shape. The negative authority flags make accidental provider, WAN-quorum, general LAN, or independent failover ownership observable and rejectable.

type HAAvailabilityOperations 

type HAAvailabilityOperations interface {
	ApplyHAAvailability(context.Context, HAAvailabilityApplyPolicy) (HAAvailabilityObservation, error)
	RemoveObsoleteHAAvailability(context.Context, HAAvailabilityExpectation) (HAAvailabilityObservation, error)
	VerifyHAAvailability(context.Context, HAAvailabilityExpectation) (HAAvailabilityObservation, error)
}

HAAvailabilityOperations is implemented by the authenticated member-local control-plane owner. Its verbs are deliberately narrower than a provider, transport, cluster-management, or generic failover API.

type HomeAccessApplyObservation 

type HomeAccessApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type HomeAccessPolicyAuthority 

type HomeAccessPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

HomeAccessPolicyAuthority is selected from the service-owned catalog during adapter registration. Request bytes cannot define these hashes.

type HomeAccessPolicyBinding 

type HomeAccessPolicyBinding struct {
	SiteRefs            []string
	NodeRefs            []string
	ExecutionChannelRef string
}

HomeAccessPolicyBinding is service-owned placement and execution-channel authority. It carries no endpoint, credential, transport configuration, discovery authority, provider handle, or provider lifecycle.

type HomeAccessPolicyExecutor 

type HomeAccessPolicyExecutor struct {
	// contains filtered or unexported fields
}

HomeAccessPolicyExecutor consumes one exact CUE-generated Home access policy through the owner-bound local enforcement and readback backend.

func NewHomeAccessPolicyExecutor 

func NewHomeAccessPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding HomeAccessPolicyBinding, authority HomeAccessPolicyAuthority, operations HomeAccessPolicyOperations) *HomeAccessPolicyExecutor

func (*HomeAccessPolicyExecutor) Execute 

func (e *HomeAccessPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*HomeAccessPolicyExecutor) Identity 

func (e *HomeAccessPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type HomeAccessPolicyOperations 

type HomeAccessPolicyOperations interface {
	EnforceLANAccess(context.Context, HomeAccessRuntimePolicy) (HomeAccessApplyObservation, error)
	EnforceLocalIngress(context.Context, HomeAccessRuntimePolicy) (HomeAccessApplyObservation, error)
	EnforcePrivilegedStepUp(context.Context, HomeAccessRuntimePolicy) (HomeAccessApplyObservation, error)
	VerifyHomeAccessPolicy(context.Context, HomeAccessVerifyExpectation) (HomeAccessVerifyObservation, error)
}

HomeAccessPolicyOperations is the finite policy-enforcement capability. It exposes no generic command, raw firewall/router API, credential, endpoint, discovery, server-provider, or lifecycle operation.

type HomeAccessRuntimePolicy 

type HomeAccessRuntimePolicy struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	Routes       []architecturev2renderer.HomeAccessEnforcementRoute
}

HomeAccessRuntimePolicy is the complete secret-free policy handed to each closed enforcement operation.

type HomeAccessVerifyExpectation 

type HomeAccessVerifyExpectation struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	RouteCount   int
	NotBefore    time.Time
}

type HomeAccessVerifyObservation 

type HomeAccessVerifyObservation struct {
	PolicyDigest           string `json:"policyDigest"`
	Status                 string `json:"status"`
	LANAccessStatus        string `json:"lanAccessStatus"`
	LocalIngressStatus     string `json:"localIngressStatus"`
	PrivilegedStepUpStatus string `json:"privilegedStepUpStatus"`
	ObservedAt             string `json:"observedAt"`
}

type HomeBackupTargetExecutor 

type HomeBackupTargetExecutor struct {
	// contains filtered or unexported fields
}

HomeBackupTargetExecutor verifies one exact CUE-declared backup target on the Home control-plane node already bound by the caller.

func NewHomeBackupTargetExecutor 

func NewHomeBackupTargetExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, host HomeBackupTargetOperations) *HomeBackupTargetExecutor

func (*HomeBackupTargetExecutor) Execute 

func (e *HomeBackupTargetExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*HomeBackupTargetExecutor) Identity 

func (e *HomeBackupTargetExecutor) Identity() runtimeexecutor.ExecutorIdentity

type HomeBackupTargetOperations 

type HomeBackupTargetOperations interface {
	ObserveBackupDirectory(context.Context, string) (BackupDirectoryObservation, error)
}

HomeBackupTargetOperations is intentionally observation-only. Core owns directory preparation; this Home owner may neither create storage nor run a generic command, network operation, discovery flow, or provider lifecycle.

func NewOSHomeBackupTargetOperations 

func NewOSHomeBackupTargetOperations() HomeBackupTargetOperations

NewOSHomeBackupTargetOperations explicitly selects local filesystem observation as the closed Home backup-target capability owner.

type HomeDeviceAuthorityApplyObservation 

type HomeDeviceAuthorityApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type HomeDeviceAuthorityPolicyAuthority 

type HomeDeviceAuthorityPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type HomeDeviceAuthorityPolicyBinding 

type HomeDeviceAuthorityPolicyBinding struct {
	SiteRefs            []string
	NodeRefs            []string
	ExecutionChannelRef string
}

type HomeDeviceAuthorityPolicyExecutor 

type HomeDeviceAuthorityPolicyExecutor struct {
	// contains filtered or unexported fields
}

func NewHomeDeviceAuthorityPolicyExecutor 

func NewHomeDeviceAuthorityPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding HomeDeviceAuthorityPolicyBinding, authority HomeDeviceAuthorityPolicyAuthority, operations HomeDeviceAuthorityPolicyOperations) *HomeDeviceAuthorityPolicyExecutor

func (*HomeDeviceAuthorityPolicyExecutor) Execute 

func (e *HomeDeviceAuthorityPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*HomeDeviceAuthorityPolicyExecutor) Identity 

func (e *HomeDeviceAuthorityPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type HomeDeviceAuthorityPolicyOperations 

type HomeDeviceAuthorityPolicyOperations interface {
	ConfigureDeviceEnrollment(context.Context, HomeDeviceAuthorityRuntimePolicy) (HomeDeviceAuthorityApplyObservation, error)
	ConfigureDeviceCredentialIssuer(context.Context, HomeDeviceAuthorityRuntimePolicy) (HomeDeviceAuthorityApplyObservation, error)
	ConfigureDeviceCredentialRevocation(context.Context, HomeDeviceAuthorityRuntimePolicy) (HomeDeviceAuthorityApplyObservation, error)
	VerifyHomeDeviceAuthorityPolicy(context.Context, HomeDeviceAuthorityVerifyExpectation) (HomeDeviceAuthorityVerifyObservation, error)
}

HomeDeviceAuthorityPolicyOperations configures only the device authority policy. It does not enroll a particular device, mint a credential, carry key bytes or credentials, expose an endpoint, or own network/provider lifecycle.

type HomeDeviceAuthorityRuntimePolicy 

type HomeDeviceAuthorityRuntimePolicy struct {
	PolicyDigest string
	Policy       architecturev2renderer.HomeDeviceAuthorityEnforcementPolicy
	NodeRefs     []string
}

type HomeDeviceAuthorityVerifyExpectation 

type HomeDeviceAuthorityVerifyExpectation struct {
	PolicyDigest string
	StackID      string
	SiteRefs     []string
	NodeRefs     []string
	IssuerID     string
	NotBefore    time.Time
}

type HomeDeviceAuthorityVerifyObservation 

type HomeDeviceAuthorityVerifyObservation struct {
	PolicyDigest     string `json:"policyDigest"`
	Status           string `json:"status"`
	EnrollmentStatus string `json:"enrollmentStatus"`
	IssuerStatus     string `json:"issuerStatus"`
	RevocationStatus string `json:"revocationStatus"`
	ObservedAt       string `json:"observedAt"`
}

type HostAdmissionAuthority 

type HostAdmissionAuthority struct {
	ProviderContractHash string
	HealthContractHash   string
}

type HostAdmissionExecutor 

type HostAdmissionExecutor struct {
	// contains filtered or unexported fields
}

HostAdmissionExecutor projects the host-conformance boundary that Product Apply has already verified into the runtime graph. It owns no probe, enrollment, credential, host mutation, provider lifecycle, or artifact capability.

func NewHostAdmissionExecutor 

func NewHostAdmissionExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority HostAdmissionAuthority) *HostAdmissionExecutor

func (*HostAdmissionExecutor) Execute 

func (e *HostAdmissionExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*HostAdmissionExecutor) Identity 

func (e *HostAdmissionExecutor) Identity() runtimeexecutor.ExecutorIdentity

type ImmichSelectedPaaSExecutor 

type ImmichSelectedPaaSExecutor struct {
	// contains filtered or unexported fields
}

ImmichSelectedPaaSExecutor consumes only the exact generated Immich bundle. Product registration is available only through an explicitly supplied, authenticated operations implementation owned by the selected PaaS control plane; this adapter never discovers or constructs one.

func NewImmichSelectedPaaSExecutor 

func NewImmichSelectedPaaSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority ImmichWorkloadAuthority, operations SelectedPaaSWorkloadOperations) *ImmichSelectedPaaSExecutor

func (*ImmichSelectedPaaSExecutor) Execute 

func (e *ImmichSelectedPaaSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*ImmichSelectedPaaSExecutor) Identity 

func (e *ImmichSelectedPaaSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type ImmichWorkloadAuthority 

type ImmichWorkloadAuthority = SelectedPaaSWorkloadAuthority

ImmichWorkloadAuthority remains a source-compatible product alias while the execution boundary is the reusable selected-PaaS authority.

type InternalPKIAuthority 

type InternalPKIAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type InternalPKIExecutor 

type InternalPKIExecutor struct {
	// contains filtered or unexported fields
}

func NewInternalPKIExecutor 

func NewInternalPKIExecutor(
	identity runtimeexecutor.ExecutorIdentity,
	binding LocalTargetBinding,
	authority InternalPKIAuthority,
	root InternalPKIRootOperations,
	leaf InternalPKILeafOperations,
	trust InternalPKITrustOperations,
	verify InternalPKIVerifyOperations,
) *InternalPKIExecutor

func NewInternalPKIExecutorWithClock 

func NewInternalPKIExecutorWithClock(
	identity runtimeexecutor.ExecutorIdentity,
	binding LocalTargetBinding,
	authority InternalPKIAuthority,
	root InternalPKIRootOperations,
	leaf InternalPKILeafOperations,
	trust InternalPKITrustOperations,
	verify InternalPKIVerifyOperations,
	now func() time.Time,
) *InternalPKIExecutor

func (*InternalPKIExecutor) Execute 

func (e *InternalPKIExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*InternalPKIExecutor) Identity 

func (e *InternalPKIExecutor) Identity() runtimeexecutor.ExecutorIdentity

type InternalPKILeafObservation 

type InternalPKILeafObservation struct {
	IdentityID             string   `json:"identityId"`
	SubjectRef             string   `json:"subjectRef"`
	DNSSANs                []string `json:"dnsSANs"`
	IPSANs                 []string `json:"ipSANs"`
	CA                     bool     `json:"ca"`
	CertificateFingerprint string   `json:"certificateFingerprint"`
	PublicKeyFingerprint   string   `json:"publicKeyFingerprint"`
	TrustRootFingerprint   string   `json:"trustRootFingerprint"`
	Serial                 string   `json:"serial"`
	NotBefore              string   `json:"notBefore"`
	NotAfter               string   `json:"notAfter"`
	ObservedAt             string   `json:"observedAt"`
}

type InternalPKILeafOperations 

type InternalPKILeafOperations interface {
	IssueCompilerBoundLeaves(context.Context, InternalPKIPolicy, string) (InternalPKILeafSetObservation, error)
}

type InternalPKILeafSetObservation 

type InternalPKILeafSetObservation struct {
	PolicyDigest string                       `json:"policyDigest"`
	Status       string                       `json:"status"`
	Leaves       []InternalPKILeafObservation `json:"leaves"`
}

type InternalPKIPolicy 

type InternalPKIPolicy struct {
	PolicyDigest        string
	StackID             string
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
	EvaluatedAt         string
	Authority           architecturev2renderer.InternalPKIRuntimeAuthority
	TrustTargets        []architecturev2renderer.InternalPKIRuntimeTrustTarget
	LeafIdentities      []architecturev2renderer.InternalPKIRuntimeLeafIdentity
	ValiditySeconds     int
	RenewBeforeSeconds  int
}

type InternalPKIRootObservation 

type InternalPKIRootObservation struct {
	PolicyDigest         string   `json:"policyDigest"`
	Status               string   `json:"status"`
	RootFingerprint      string   `json:"rootFingerprint"`
	PublicKeyFingerprint string   `json:"publicKeyFingerprint"`
	Serial               string   `json:"serial"`
	NotBefore            string   `json:"notBefore"`
	NotAfter             string   `json:"notAfter"`
	ObservedAt           string   `json:"observedAt"`
	TrustedFingerprints  []string `json:"trustedFingerprints"`
	ContinuityValidUntil string   `json:"continuityValidUntil"`
}

type InternalPKIRootOperations 

type InternalPKIRootOperations interface {
	EnsureRootAuthority(context.Context, InternalPKIPolicy) (InternalPKIRootObservation, error)
}

Root, leaf, trust-distribution, and verification operations are separate construction-time authorities. StackKits never receives their key material.

type InternalPKITrustObservation 

type InternalPKITrustObservation struct {
	PolicyDigest    string                                                 `json:"policyDigest"`
	Status          string                                                 `json:"status"`
	RootFingerprint string                                                 `json:"rootFingerprint"`
	Targets         []architecturev2renderer.InternalPKIRuntimeTrustTarget `json:"targets"`
	ObservedAt      string                                                 `json:"observedAt"`
	ValidUntil      string                                                 `json:"validUntil"`
}

type InternalPKITrustOperations 

type InternalPKITrustOperations interface {
	DistributePublicTrustRoot(context.Context, InternalPKIPolicy, string) (InternalPKITrustObservation, error)
}

type InternalPKIVerifyObservation 

type InternalPKIVerifyObservation struct {
	PolicyDigest    string                                                 `json:"policyDigest"`
	Status          string                                                 `json:"status"`
	RootFingerprint string                                                 `json:"rootFingerprint"`
	Leaves          []InternalPKILeafObservation                           `json:"leaves"`
	Targets         []architecturev2renderer.InternalPKIRuntimeTrustTarget `json:"targets"`
	ObservedAt      string                                                 `json:"observedAt"`
}

type InternalPKIVerifyOperations 

type InternalPKIVerifyOperations interface {
	VerifyInternalPKI(context.Context, InternalPKIPolicy, string) (InternalPKIVerifyObservation, error)
}

type LocalAutonomyApplyObservation 

type LocalAutonomyApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type LocalAutonomyPolicyAuthority 

type LocalAutonomyPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type LocalAutonomyPolicyBinding 

type LocalAutonomyPolicyBinding struct {
	HomeSiteRefs        []string
	NodeRefs            []string
	ExecutionChannelRef string
}

type LocalAutonomyPolicyExecutor 

type LocalAutonomyPolicyExecutor struct {
	// contains filtered or unexported fields
}

LocalAutonomyPolicyExecutor admits the exact CUE autonomy policy through the owner-bound local enforcement and readback backend.

func NewLocalAutonomyPolicyExecutor 

func NewLocalAutonomyPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalAutonomyPolicyBinding, authority LocalAutonomyPolicyAuthority, operations LocalAutonomyPolicyOperations) *LocalAutonomyPolicyExecutor

func (*LocalAutonomyPolicyExecutor) Execute 

func (e *LocalAutonomyPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*LocalAutonomyPolicyExecutor) Identity 

func (e *LocalAutonomyPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type LocalAutonomyPolicyOperations 

type LocalAutonomyPolicyOperations interface {
	DenyForbiddenCrossSiteSessions(context.Context, LocalAutonomyRuntimePolicy) (LocalAutonomyApplyObservation, error)
	EnforceLinkLossPolicy(context.Context, LocalAutonomyRuntimePolicy) (LocalAutonomyApplyObservation, error)
	PreserveLocalControl(context.Context, LocalAutonomyRuntimePolicy) (LocalAutonomyApplyObservation, error)
	VerifyLocalAutonomyPolicy(context.Context, LocalAutonomyVerifyExpectation) (LocalAutonomyVerifyObservation, error)
}

LocalAutonomyPolicyOperations is intentionally limited to the three exact enforcement responsibilities declared by CUE plus their readback. It owns no generic network, credential, provider, endpoint, tunnel, or lifecycle API.

type LocalAutonomyRuntimePolicy 

type LocalAutonomyRuntimePolicy struct {
	PolicyDigest string
	Policy       architecturev2renderer.LocalAutonomyEnforcementPolicy
	NodeRefs     []string
}

type LocalAutonomyVerifyExpectation 

type LocalAutonomyVerifyExpectation struct {
	PolicyDigest    string
	StackID         string
	KitSlug         string
	HomeSiteRefs    []string
	CloudSiteRefs   []string
	ControlMembers  []string
	OnLinkLoss      string
	OnCloudLoss     string
	CloudEdge       string
	DenyCrossSite   bool
	MaxStaleSeconds int
	NotBefore       time.Time
}

type LocalAutonomyVerifyObservation 

type LocalAutonomyVerifyObservation struct {
	PolicyDigest           string `json:"policyDigest"`
	Status                 string `json:"status"`
	CrossSiteSessionStatus string `json:"crossSiteSessionStatus"`
	LinkLossStatus         string `json:"linkLossStatus"`
	LocalControlStatus     string `json:"localControlStatus"`
	ObservedAt             string `json:"observedAt"`
}

type LocalTargetBinding 

type LocalTargetBinding struct {
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
}

LocalTargetBinding binds the current-process adapter to one exact planned node. It is operator/runtime authority and can never be inferred from an artifact, a hostname, LAN discovery, or the first target in a plan.

type ModernCloudIdentityVerifierPolicyExecutor 

type ModernCloudIdentityVerifierPolicyExecutor struct {
	// contains filtered or unexported fields
}

func NewModernCloudIdentityVerifierPolicyExecutor 

func NewModernCloudIdentityVerifierPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding ModernIdentitySitePolicyBinding, authority ModernIdentityTrustPolicyAuthority, operations ModernCloudIdentityVerifierPolicyOperations) *ModernCloudIdentityVerifierPolicyExecutor

func (ModernCloudIdentityVerifierPolicyExecutor) Execute 

func (e ModernCloudIdentityVerifierPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (ModernCloudIdentityVerifierPolicyExecutor) Identity 

func (e ModernCloudIdentityVerifierPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type ModernCloudIdentityVerifierPolicyOperations 

type ModernCloudIdentityVerifierPolicyOperations interface {
	ApplyInboundRevocationStateReferences(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	ApplyInboundVerificationKeyReferences(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	VerifyCloudSessions(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	DenyReverseDistribution(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	VerifyModernCloudIdentityPolicy(context.Context, ModernIdentitySiteVerifyExpectation) (ModernIdentitySiteVerifyObservation, error)
}

ModernCloudIdentityVerifierPolicyOperations owns only Cloud-side application and verification of bounded Home verifier state. It cannot issue credentials, enroll devices, reverse the flow, or address the Home network.

type ModernHomeIdentityTrustPolicyExecutor 

type ModernHomeIdentityTrustPolicyExecutor struct {
	// contains filtered or unexported fields
}

func NewModernHomeIdentityTrustPolicyExecutor 

func NewModernHomeIdentityTrustPolicyExecutor(identity runtimeexecutor.ExecutorIdentity, binding ModernIdentitySitePolicyBinding, authority ModernIdentityTrustPolicyAuthority, operations ModernHomeIdentityTrustPolicyOperations) *ModernHomeIdentityTrustPolicyExecutor

func (ModernHomeIdentityTrustPolicyExecutor) Execute 

func (e ModernHomeIdentityTrustPolicyExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (ModernHomeIdentityTrustPolicyExecutor) Identity 

func (e ModernHomeIdentityTrustPolicyExecutor) Identity() runtimeexecutor.ExecutorIdentity

type ModernHomeIdentityTrustPolicyOperations 

type ModernHomeIdentityTrustPolicyOperations interface {
	VerifyHomeSessions(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	PublishRevocationStateReferences(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	PublishVerificationKeyReferences(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	EnforceOutboundOnlyDistribution(context.Context, ModernIdentitySiteRuntimePolicy) (ModernIdentitySiteApplyObservation, error)
	VerifyModernHomeIdentityPolicy(context.Context, ModernIdentitySiteVerifyExpectation) (ModernIdentitySiteVerifyObservation, error)
}

ModernHomeIdentityTrustPolicyOperations owns only Home-side verification and publication of bounded verifier references. It has no transport, endpoint, credential, signing-key, provider, lease, or lifecycle API.

type ModernIdentitySiteApplyObservation 

type ModernIdentitySiteApplyObservation struct {
	PolicyDigest string `json:"policyDigest"`
	Status       string `json:"status"`
}

type ModernIdentitySitePolicyBinding 

type ModernIdentitySitePolicyBinding struct {
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
}

type ModernIdentitySiteRuntimePolicy 

type ModernIdentitySiteRuntimePolicy struct {
	PolicyDigest        string
	StackID             string
	Role                string
	SiteRef             string
	NodeRef             string
	ExecutionChannelRef string
	MaxStaleSeconds     int
	Verifiers           []architecturev2renderer.ModernIdentityTrustVerifier
	Distributions       []architecturev2renderer.ModernIdentityTrustDistribution
}

type ModernIdentitySiteVerifyExpectation 

type ModernIdentitySiteVerifyExpectation struct {
	PolicyDigest     string
	StackID          string
	Role             string
	SiteRef          string
	NodeRef          string
	VerifierIDs      []string
	DistributionIDs  []string
	MaxStaleSeconds  int
	ExecutionChannel string
	NotBefore        time.Time
}

type ModernIdentitySiteVerifyObservation 

type ModernIdentitySiteVerifyObservation struct {
	PolicyDigest       string `json:"policyDigest"`
	Status             string `json:"status"`
	VerifierStatus     string `json:"verifierStatus"`
	DistributionStatus string `json:"distributionStatus"`
	DirectionStatus    string `json:"directionStatus"`
	ObservedAt         string `json:"observedAt"`
}

type ModernIdentityTrustPolicyAuthority 

type ModernIdentityTrustPolicyAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type OSFederationLinkOperations 

type OSFederationLinkOperations struct {
	// contains filtered or unexported fields
}

func NewOSFederationLinkOperations 

func NewOSFederationLinkOperations(root string) *OSFederationLinkOperations
func (o *OSFederationLinkOperations) EstablishInterSiteLink(ctx context.Context, p FederationLinkApplyPolicy) (result FederationLinkObservation, err error)
func (o *OSFederationLinkOperations) RemoveObsoleteInterSiteLink(ctx context.Context, p FederationLinkExpectation) (FederationLinkObservation, error)
func (o *OSFederationLinkOperations) StopInterSiteLink(ctx context.Context, fabricRef string) error

StopInterSiteLink withdraws local activation without deleting the external interface, keys, routing setup or custody. Readback must prove it is down. 

func (o *OSFederationLinkOperations) VerifyInterSiteLink(ctx context.Context, p FederationLinkExpectation) (FederationLinkObservation, error)

type PrivateAISelectedPaaSExecutor 

type PrivateAISelectedPaaSExecutor struct {
	// contains filtered or unexported fields
}

func NewPrivateAISelectedPaaSExecutor 

func NewPrivateAISelectedPaaSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority PrivateAIWorkloadAuthority, operations SelectedPaaSWorkloadOperations) *PrivateAISelectedPaaSExecutor

func (*PrivateAISelectedPaaSExecutor) Execute 

func (e *PrivateAISelectedPaaSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*PrivateAISelectedPaaSExecutor) Identity 

func (e *PrivateAISelectedPaaSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type PrivateAIWorkloadAuthority 

type PrivateAIWorkloadAuthority = SelectedPaaSWorkloadAuthority

type PublicTLSApplyPolicy 

type PublicTLSApplyPolicy struct {
	PolicyDigest        string                                         `json:"policyDigest"`
	StackID             string                                         `json:"stackId"`
	SiteRef             string                                         `json:"siteRef"`
	NodeRef             string                                         `json:"nodeRef"`
	ExecutionChannelRef string                                         `json:"executionChannelRef"`
	EvaluatedAt         string                                         `json:"evaluatedAt"`
	Profile             architecturev2renderer.PublicTLSRuntimeProfile `json:"profile"`
	Issuer              architecturev2renderer.PublicTLSRuntimeIssuer  `json:"issuer"`
	Routes              []architecturev2renderer.PublicTLSRuntimeRoute `json:"routes"`
}

PublicTLSApplyPolicy is the exact credential-free policy passed to an authenticated Cloud TLS implementation. The implementation owns ACME credentials and logical material-slot custody outside StackKits.

type PublicTLSAuthority 

type PublicTLSAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	HealthContractHash   string
}

type PublicTLSExecutor 

type PublicTLSExecutor struct {
	// contains filtered or unexported fields
}

func NewPublicTLSExecutor 

func NewPublicTLSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority PublicTLSAuthority, operations PublicTLSOperations) *PublicTLSExecutor

func NewPublicTLSExecutorWithClock 

func NewPublicTLSExecutorWithClock(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority PublicTLSAuthority, operations PublicTLSOperations, now func() time.Time) *PublicTLSExecutor

func (*PublicTLSExecutor) Execute 

func (e *PublicTLSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*PublicTLSExecutor) Identity 

func (e *PublicTLSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type PublicTLSExpectation 

type PublicTLSExpectation struct {
	PolicyDigest        string   `json:"policyDigest"`
	StackID             string   `json:"stackId"`
	SiteRef             string   `json:"siteRef"`
	NodeRef             string   `json:"nodeRef"`
	ExecutionChannelRef string   `json:"executionChannelRef"`
	EvaluatedAt         string   `json:"evaluatedAt"`
	ValiditySeconds     int      `json:"validitySeconds"`
	RenewBeforeSeconds  int      `json:"renewBeforeSeconds"`
	RouteRefs           []string `json:"routeRefs"`
	MaterialSlotIDs     []string `json:"materialSlotIds"`
}

type PublicTLSObservation 

type PublicTLSObservation struct {
	PolicyDigest    string   `json:"policyDigest"`
	Status          string   `json:"status"`
	EvaluatedAt     string   `json:"evaluatedAt"`
	ValidUntil      string   `json:"validUntil"`
	RouteRefs       []string `json:"routeRefs"`
	MaterialSlotIDs []string `json:"materialSlotIds"`
}

PublicTLSObservation proves only postconditions and logical custody. It cannot carry certificate, private-key, account-key, credential, endpoint, or provider resource bytes.

type PublicTLSOperations 

type PublicTLSOperations interface {
	MaterializePublicTLS(context.Context, PublicTLSApplyPolicy) (PublicTLSObservation, error)
	RenewPublicTLS(context.Context, PublicTLSExpectation) (PublicTLSObservation, error)
	VerifyPublicTLS(context.Context, PublicTLSExpectation) (PublicTLSObservation, error)
}

type RemovalProgressError 

type RemovalProgressError struct {
	Err        error
	Progressed bool
}

RemovalProgressError records whether runtime mutation started. Callers must retain recovery state when Progressed is true instead of treating the workload as unchanged.

func (*RemovalProgressError) Error 

func (e *RemovalProgressError) Error() string

func (*RemovalProgressError) Unwrap 

func (e *RemovalProgressError) Unwrap() error

type RuntimeExpectation 

type RuntimeExpectation struct {
	Runtime  string
	Engine   string
	Rootless bool
	DataRoot string
}

RuntimeExpectation is the only runtime observation the bootstrap adapter can request from its host operations implementation.

type RuntimeObservation 

type RuntimeObservation struct {
	Engine   string `json:"engine"`
	Version  string `json:"version"`
	DataRoot string `json:"dataRoot"`
	Status   string `json:"status"`
}

RuntimeObservation is bounded evidence for an already present runtime.

type SecurityBaselineExecutor 

type SecurityBaselineExecutor struct {
	// contains filtered or unexported fields
}

SecurityBaselineExecutor applies only the exact CUE-owned Architecture-v2 Foundation host policy to the current local host. It has no provider, network, Docker, workspace, or credential authority.

func NewSecurityBaselineExecutor 

func NewSecurityBaselineExecutor(identity runtimeexecutor.ExecutorIdentity, runner CommandRunner) *SecurityBaselineExecutor

NewSecurityBaselineExecutor constructs the isolated local adapter. A nil runner selects the real bounded /bin/sh process runner.

func (*SecurityBaselineExecutor) Execute 

func (e *SecurityBaselineExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*SecurityBaselineExecutor) Identity 

func (e *SecurityBaselineExecutor) Identity() runtimeexecutor.ExecutorIdentity

type SelectedPaaSApplication 

type SelectedPaaSApplication string

SelectedPaaSApplication names one closed application workload realized through the shared selected-PaaS seam. Each value is backed by the existing renderer parser for that workload; request data can never select it. 

const (
	SelectedPaaSApplicationGitea         SelectedPaaSApplication = "gitea"
	SelectedPaaSApplicationPaperless     SelectedPaaSApplication = "paperless-ngx"
	SelectedPaaSApplicationJellyfin      SelectedPaaSApplication = "jellyfin"
	SelectedPaaSApplicationHomeAssistant SelectedPaaSApplication = "home-assistant"
)

func (SelectedPaaSApplication) Refs 

func (application SelectedPaaSApplication) Refs() (SelectedPaaSApplicationRefs, bool)

type SelectedPaaSApplicationExecutor 

type SelectedPaaSApplicationExecutor struct {
	// contains filtered or unexported fields
}

SelectedPaaSApplicationExecutor realizes one closed application workload through the provider-neutral SelectedPaaSWorkloadOperations owner.

func NewSelectedPaaSApplicationExecutor 

func NewSelectedPaaSApplicationExecutor(
	application SelectedPaaSApplication,
	identity runtimeexecutor.ExecutorIdentity,
	binding LocalTargetBinding,
	authority SelectedPaaSWorkloadAuthority,
	operations SelectedPaaSWorkloadOperations,
) *SelectedPaaSApplicationExecutor

NewSelectedPaaSApplicationExecutor binds one named application to exact channel and catalog authority. An unknown application yields an executor that fails closed on every call.

func (*SelectedPaaSApplicationExecutor) Execute 

func (e *SelectedPaaSApplicationExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*SelectedPaaSApplicationExecutor) Identity 

func (e *SelectedPaaSApplicationExecutor) Identity() runtimeexecutor.ExecutorIdentity

type SelectedPaaSApplicationRefs 

type SelectedPaaSApplicationRefs struct {
	Name        string
	ProviderRef string
	ModuleRef   string
	UnitRef     string
	WorkloadRef string
}

SelectedPaaSApplicationRefs is the catalog selector identity of one named application, exported so service construction cannot drift from the executor's own request contract.

type SelectedPaaSApplyReceipt 

type SelectedPaaSApplyReceipt struct {
	InstanceRef    string `json:"instanceRef"`
	ArtifactDigest string `json:"artifactDigest"`
	Status         string `json:"status"`
}

type SelectedPaaSComponentObservation 

type SelectedPaaSComponentObservation struct {
	ID          string `json:"id"`
	ImageDigest string `json:"imageDigest"`
	Status      string `json:"status"`
	Health      string `json:"health"`
	Reason      string `json:"reason,omitempty"`
}

type SelectedPaaSRouteObservation 

type SelectedPaaSRouteObservation struct {
	RouteRef              string `json:"routeRef"`
	ServiceRef            string `json:"serviceRef"`
	ModuleRef             string `json:"moduleRef"`
	Exposure              string `json:"exposure"`
	Protocol              string `json:"protocol"`
	UpstreamProtocol      string `json:"upstreamProtocol"`
	HealthGateRef         string `json:"healthGateRef"`
	BackendPoolRef        string `json:"backendPoolRef"`
	Host                  string `json:"host,omitempty"`
	RoutePath             string `json:"routePath"`
	Port                  int    `json:"port"`
	TargetPort            int    `json:"targetPort"`
	TLSRequired           bool   `json:"tlsRequired"`
	TLSMode               string `json:"tlsMode"`
	TLSMinVersion         string `json:"tlsMinVersion,omitempty"`
	TLSProfileRef         string `json:"tlsProfileRef,omitempty"`
	TLSIssuerRef          string `json:"tlsIssuerRef,omitempty"`
	TLSOwnerCapabilityRef string `json:"tlsOwnerCapabilityRef,omitempty"`
	Method                string `json:"method"`
	Path                  string `json:"path"`
	Status                string `json:"status"`
	HTTPStatus            int    `json:"httpStatus"`
}

SelectedPaaSRouteObservation is the provider-neutral service readback.

type SelectedPaaSRuntimeAdapterAgentAuthority 

type SelectedPaaSRuntimeAdapterAgentAuthority struct {
	ID                 string
	ModuleRef          string
	ModuleVersion      string
	ModuleContractHash string
}

type SelectedPaaSRuntimeAdapterAuthority 

type SelectedPaaSRuntimeAdapterAuthority struct {
	ID                   string
	ProviderRef          string
	ProviderVersion      string
	ProviderContractHash string
	ModuleRef            string
	ModuleVersion        string
	ModuleContractHash   string
	Agents               []SelectedPaaSRuntimeAdapterAgentAuthority
}

SelectedPaaSRuntimeAdapterAuthority identifies the one adapter implementation an Application Kit is allowed to call.

type SelectedPaaSWorkloadAuthority 

type SelectedPaaSWorkloadAuthority struct {
	ProviderContractHash string
	ModuleContractHash   string
	UnitContractHash     string
	HealthContractHash   string
	RuntimeAdapter       SelectedPaaSRuntimeAdapterAuthority
}

SelectedPaaSWorkloadAuthority is catalog authority fixed by product-owned adapter registration. Workload request data can never supply these hashes.

type SelectedPaaSWorkloadDeployment 

type SelectedPaaSWorkloadDeployment struct {
	WorkloadRef         string
	ModuleRef           string
	UnitRef             string
	Release             string
	SiteRef             string
	NodeRef             string
	InstanceRef         string
	ExecutionChannelRef string
	ArtifactRef         string
	ArtifactDigest      string
	Bundle              []byte
	Route               architecturev2renderer.ApplicationDeliveryRouteDescriptor
	RuntimeAdapter      runtimeexecutor.RuntimeAdapterBinding
	AdapterArtifacts    []runtimeexecutor.Artifact
}

SelectedPaaSWorkloadDeployment is a defensive, provider-neutral request to an already selected PaaS integration. Bundle contains only a validated workload graph and opaque secret references, never secret material.

type SelectedPaaSWorkloadObservation 

type SelectedPaaSWorkloadObservation struct {
	WorkloadRef    string                             `json:"workloadRef"`
	Release        string                             `json:"release"`
	InstanceRef    string                             `json:"instanceRef"`
	ArtifactDigest string                             `json:"artifactDigest"`
	Status         string                             `json:"status"`
	Components     []SelectedPaaSComponentObservation `json:"components"`
	Route          SelectedPaaSRouteObservation       `json:"route"`
}

type SelectedPaaSWorkloadObservationValidator 

type SelectedPaaSWorkloadObservationValidator interface {
	ValidateWorkloadObservation(SelectedPaaSWorkloadDeployment, SelectedPaaSWorkloadObservation) error
}

SelectedPaaSWorkloadObservationValidator is an optional extension of an operations owner. Existing operations implementations remain source compatible while restore verification can require the selected owner's semantic status-code and component validation.

type SelectedPaaSWorkloadOperations 

type SelectedPaaSWorkloadOperations interface {
	ApplyWorkload(context.Context, SelectedPaaSWorkloadDeployment) (SelectedPaaSApplyReceipt, error)
	ObserveWorkload(context.Context, SelectedPaaSWorkloadDeployment) (SelectedPaaSWorkloadObservation, error)
}

SelectedPaaSWorkloadOperations is implemented by the selected PaaS owner. It intentionally has no provider/server lifecycle, lease, generation, endpoint selection, credential, generic command, or filesystem method.

func NewOSStandaloneComposeWorkloadOperations 

func NewOSStandaloneComposeWorkloadOperations(workspaceRoot string) (SelectedPaaSWorkloadOperations, error)

NewOSStandaloneComposeWorkloadOperations constructs the local no-PaaS workload adapter for an existing owner workspace.

type VaultwardenSelectedPaaSExecutor 

type VaultwardenSelectedPaaSExecutor struct {
	// contains filtered or unexported fields
}

func NewVaultwardenSelectedPaaSExecutor 

func NewVaultwardenSelectedPaaSExecutor(identity runtimeexecutor.ExecutorIdentity, binding LocalTargetBinding, authority VaultwardenWorkloadAuthority, operations SelectedPaaSWorkloadOperations) *VaultwardenSelectedPaaSExecutor

func (*VaultwardenSelectedPaaSExecutor) Execute 

func (e *VaultwardenSelectedPaaSExecutor) Execute(ctx context.Context, request runtimeexecutor.ExecutionRequest) (runtimeexecutor.ExecutionOutcome, error)

func (*VaultwardenSelectedPaaSExecutor) Identity 

func (e *VaultwardenSelectedPaaSExecutor) Identity() runtimeexecutor.ExecutorIdentity

type VaultwardenWorkloadAuthority 

type VaultwardenWorkloadAuthority = SelectedPaaSWorkloadAuthority

type WireGuardFabricCustody 

type WireGuardFabricCustody struct {
	BindingHash           string `json:"bindingHash"`
	FabricRef             string `json:"fabricRef"`
	CustodyAttestationRef string `json:"custodyAttestationRef"`
	SiteKind              string `json:"siteKind"`
	PeerPublicKey         string `json:"peerPublicKey"`
	PeerAddress           string `json:"peerAddress"`
	OriginServerName      string `json:"originServerName"`
	OriginSocket          string `json:"originSocket"`
	PeerRef               string `json:"peerRef"`
	ServicePort           uint16 `json:"servicePort"`
}

WireGuardFabricCustody resolves an already-configured external fabric into local runtime handles. It is private Owner custody, never a StackSpec field or executor artifact. The external fabric keeps keys, endpoint discovery and interface creation; StackKits controls only this interface's local activation.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.