security

type BlockSecurityArgs struct {
	// BlockNumber is the explorer-visible block height. Unused by
	// the current implementation but reserved so the RPC shape is
	// stable when per-block details are added.
	BlockNumber avajson.Uint64 `json:"blockNumber"`
	// Chain is the chain alias ("P", "X", "C") the block belongs to.
	// Reserved for the same reason.
	Chain string `json:"chain,omitempty"`
}

type BlockSecurityReply struct {
	// SecurityProfileID is the wire byte of the chain's active
	// profile at the time the block was accepted. Constant for a
	// chain that has not undergone a profile migration.
	SecurityProfileID uint32 `json:"security_profile_id"`

	// SecurityProfileName mirrors ProfileReply.ProfileName.
	SecurityProfileName string `json:"security_profile_name"`

	// PulsarMSignatureValid is true iff the chain's finality scheme
	// is a Pulsar-M variant. Blocks accepted under this profile have
	// already passed the finality-signature gate at the consensus
	// layer; this field is the explorer-facing summary.
	PulsarMSignatureValid bool `json:"pulsar_m_signature_valid"`

	// ProofBackendID is the wire byte of the chain's canonical
	// proof backend (first AllowedProofBackends entry). Pre-rendered
	// here for explorer convenience.
	ProofBackendID uint32 `json:"proof_backend_id"`

	// ProofBackendName is the canonical SCREAMING_SNAKE_CASE name of
	// the chain's proof backend.
	ProofBackendName string `json:"proof_backend_name"`

	// PostQuantumEndToEnd mirrors ProfileReply.PostQuantumEndToEnd.
	// Duplicated onto the block-level reply so a single block
	// fetch carries the full E2E posture.
	PostQuantumEndToEnd bool `json:"post_quantum_end_to_end"`
}

type Metrics struct {
	// contains filtered or unexported fields
}

type ProfileReply struct {
	// ProfileID is the wire byte of the active profile (see
	// consensus/config.ProfileID). Stable across upgrades.
	ProfileID uint32 `json:"profile_id"`

	// ProfileName is the canonical SCREAMING_SNAKE_CASE name (e.g.
	// "LUX_STRICT_PQ"). Audit tooling matches on this name.
	ProfileName string `json:"profile_name"`

	// ProfileHash is the 48-byte SHA3-384 commitment to the profile
	// encoded as a 0x-prefixed lowercase hex string (96 hex chars).
	// Distinct profiles produce distinct hashes; identical profiles
	// produce identical hashes regardless of allow-list ordering.
	ProfileHash string `json:"profile_hash"`

	// PostQuantumEndToEnd reports whether every E2E axis (wallet, tx,
	// contract-auth, KEM, recovery) is satisfied by a NIST-PQ
	// primitive AND every classical primitive is explicitly
	// forbidden. Single boolean for dashboard wiring.
	PostQuantumEndToEnd bool `json:"post_quantum_end_to_end"`

	// NISTFriendly reports whether the chain pins a NIST-aligned
	// canonical Lux profile (StrictPQ or FIPS). A profile whose
	// HashSuiteID is SHA3_NIST but whose Forbid* bits are disabled
	// (the classical-compat fork case) is NOT NIST-friendly: NIST
	// alignment is a full-posture predicate, not a hash-suite axis.
	NISTFriendly bool `json:"nist_friendly"`

	// LuxCanonical reports whether the profile is one of the three
	// audit-signed-off-on Lux canonical profiles (StrictPQ, FIPS,
	// Permissive). Downstream forks that pin a different ProfileID
	// MUST receive false here so audit attestations refuse them.
	LuxCanonical bool `json:"lux_canonical"`

	// Scheme axes — each rendered as the SCREAMING_SNAKE canonical
	// name of the scheme byte. None / Invalid / unknown bytes are
	// rendered as the generic "UNKNOWN_0x<hex>" form so a forked
	// binary that pins an unknown byte cannot silently masquerade as
	// a canonical scheme.
	HashSuite       string `json:"hash_suite"`
	WalletScheme    string `json:"wallet_scheme"`
	TxScheme        string `json:"tx_scheme"`
	ContractAuth    string `json:"contract_auth"`
	ValidatorScheme string `json:"validator_scheme"`
	FinalityScheme  string `json:"finality_scheme"`
	HighValueScheme string `json:"high_value_scheme"`
	ProofPolicy     string `json:"proof_policy"`
	KeyExchange     string `json:"key_exchange"`
	HighValueKEM    string `json:"high_value_kem"`
	RecoveryScheme  string `json:"recovery_scheme"`

	// Forbid* axes — one boolean per refused-primitive class. Audit
	// tooling reads these to verify a deployment refuses what it
	// claims to refuse. Strict-PQ profiles set every entry true.
	ForbidECDSAWallets      bool `json:"forbid_ecdsa_wallets"`
	ForbidECDSAContractAuth bool `json:"forbid_ecdsa_contract_auth"`
	ForbidBLSContractAuth   bool `json:"forbid_bls_contract_auth"`
	ForbidClassicalKEM      bool `json:"forbid_classical_kem"`
	RequireTypedTxAuth      bool `json:"require_typed_tx_auth"`
	ForbidPairings          bool `json:"forbid_pairings"`
	ForbidKZG               bool `json:"forbid_kzg"`
	ForbidTrustedSetup      bool `json:"forbid_trusted_setup"`
	ForbidClassicalSNARKs   bool `json:"forbid_classical_snarks"`
	ForbidDevProofs         bool `json:"forbid_dev_proofs"`
	ForbidFallbacks         bool `json:"forbid_fallbacks"`
}

type Service struct {
	// contains filtered or unexported fields
}