Module native_exec 

Inactive, backend-neutral validation of a prepared single-thread exec cut.

These APIs inspect actual Detcore data. They do not authorize kernel exec, observe a physical task, install a backend, or run a lifecycle callback. The caller must own the quiescent dispatch and separately prove the admitted one-main-thread/childless domain, physical identity and registrations. In particular, probing an Arc’s lock does not establish that no other task owns it. No ordinary exec path calls this module.

The transport consumer must bound the payload before allocation/decode, authenticate its exact bytes and Config, and reject trailing bytes. It must retain the same live cut through its final physical exec edge. Deserializing serde-skipped capabilities cannot reconstruct them; the live producer must validate them before preparing the replacement table.

Structs

DetcoreExecSnapshotRefV2

A borrowed encoding of the actual already-prepared Tool and main state.

DetcoreExecSnapshotV2

Owned data decoded only after exact bounded transport authentication.

NativeExecCutBinding

Independently supplied identities of the existing prepared transaction.

NativeExecPreparationReceipt

Dispatch-owned evidence that the actual old table was inspected.

NoopTool

The concrete empty subtool supported by this first typed snapshot domain. A tool that only injects the syscall it receives.

Enums

NativeExecCutError

A data validation refusal, not a backend errno or admission capability.

Constants

DETCORE_EXEC_SNAPSHOT_VERSION

Version of the seven-field Detcore prepared-exec payload.

MAX_SNAPSHOT_BYTES

Maximum encoded snapshot size enforced by the concrete transport consumer.

Functions

bind_native_fresh_signal_identity

Rebind from the actual fresh Guest answer before native post-exec. The first domain has no admitted signal-control capability; equal None is supported data, never a fabricated task-lifetime identity.

bind_native_initial_physical_identity^⚠

Bind the genuine initial physical leader before its first thread-start. This does not initialize deterministic process identity or run a callback.

capture_prepared_native_exec

Borrow the actual prepared state, bound to its live old-table receipt.

check_prepared_native_exec_bytes

Compare the final actual prepared state directly against already sealed bytes, using the unchanged legacy serializer without a temporary encoding. The caller retains the same exclusive dispatch and old-table receipt. This checks the complete encoding, including exact length, and never resets accounting, advances a PRNG, or constructs a replacement model.

native_exec_config_digest

SHA-256 of the actual unchanged Config in the existing legacy bincode form.

validate_native_exec_guest_configuration

Check the live guest Config before snapshotting or using a restored Tool.

validate_native_exec_host_configuration

Check the actual host Config before granting native InitialImage or exec authority.

validate_old_native_exec_cut

Validate actual old state before FileMetadata::for_exec drops capabilities.