internal/

Package certstore signs with a private key held in the Windows certificate store, named by its certificate's SHA-1 thumbprint, without ever reading the key out of the store (ADR-0172, amended).

Package dirsync opens a directory so that fsyncing it makes the creates, renames and removes inside it durable — the step the WAL, checkpoints and every design-time store take after changing a directory's entries.

Package diskspace reads how large the file system holding a directory is and how much of it this process may still write — the numbers the storage monitor decides on (ADR-0481).

Package endpoint reduces a configured endpoint to the three parts an architecture sketch shows of it — scheme, host and port — and to nothing else (ADR-0471).

Package impldigest names the implementation of a built-in Worker Type by the bytes it is compiled from, so that conformance evidence can be bound to it (ADR-0483, "Digests and implementation identity").

Package ownerfile makes a file readable and writable by the account running this process and by nobody else, and checks that it is.

Package sharedread opens a file for reading without stopping anyone else from deleting it or renaming another file over it — the latter, on Windows, with a rename that asks for POSIX semantics, as os.Root.Rename does.

Package sysproxy chooses the proxy an outbound HTTP request goes through the way .NET, and so PowerShell, chooses it on the same host (ADR-0464).

Package trustedproxy takes a client's address from the proxy in front of Atlas, and from nobody else (ADR-0448).