Documentation
¶
Overview ¶
Package runtimeprofile connects each StackKits entry point to the shared self-hosted data-profile policy. Locality policy remains in go-common.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AdmitSpec ¶
AdmitSpec binds native lifecycle admission to the persisted selection. It never repairs a mismatch by changing the environment or rewriting intent.
func Boot ¶
func Boot() error
Boot validates the edition/profile before any runtime work and installs the shared HTTP/DNS guard. Custom transports and subprocesses retain their own admitted local destinations; this does not claim an operating-system firewall.
func FullLocal ¶
func FullLocal() bool
FullLocal is queried only after Boot has validated the process environment.
func ValidateLocalDNS ¶
Types ¶
type DataProfile ¶
type DataProfile string
DataProfile is the persisted StackSpec selection carried by a verified plan. Its zero value is the backward-compatible Standard profile.
const ( StandardProfile DataProfile = "standard" FullLocalProfile DataProfile = dataprofile.FullLocal )
func FromBootEnv ¶
func FromBootEnv() (DataProfile, error)
FromBootEnv validates the shared edition/profile policy for initial authoring.
func Parse ¶
func Parse(value string) (DataProfile, error)
Parse accepts canonical intent only; an absent field retains Standard.
func (DataProfile) FullLocal ¶
func (p DataProfile) FullLocal() bool
type LocalNetwork ¶
type LocalNetwork struct {
StackID string `json:"stackId"`
Resolver string `json:"resolver"`
Upstream []string `json:"upstream"`
}
LocalNetwork is compiler-owned cohort identity and DNS transport. The resolver is the attested node's signed LAN DNS service, not a host default.
func (LocalNetwork) Validate ¶
func (p LocalNetwork) Validate() error
type OfflineBundleRef ¶
type OfflineBundleRef struct {
Path string `json:"path" yaml:"path"`
ManifestSHA256 string `json:"manifestSha256" yaml:"manifestSha256"`
}
OfflineBundleRef identifies immutable installation input. This reference never replaces release attestation or verification of the complete bundle.
func (OfflineBundleRef) Validate ¶
func (r OfflineBundleRef) Validate() error
Validate checks the portable Linux mount reference, without reading files or implying trust. Restricting characters keeps Compose interpolation literal.
Source Files