Module liteinst_initial_image 

Bounded InitialImage launch packet shared by the host and private runtime.

Packet bytes, nonce and file seals are not authorization. The coordinator separately redeems a one-use launch instance against its actual process watch. Decoding validates the complete byte shape without allocating. Only the host encodes packets; the private initializer consumes borrowed fields.

Structs

Packet

Borrowed fields of one complete, bounded launch packet.

Enums

PacketError

A packet shape refusal, with no heap-backed error payload.

Constants

HEADER_LEN

Bytes before the three variable length fields.

MAGIC

Magic naming this explicit InitialImage protocol.

MAX_PACKET_LEN

Maximum complete packet size, including its fixed header.

OBSERVER_VERSION

Explicit observer-bearing ordinary packet version. Legacy version one is unchanged; an observer is never smuggled through the DETLOG policy/identity.

VERSION

Only this wire version is accepted.

Functions

config_violation

Refuse unsupported InitialImage configuration without changing it.

decode

Decode and validate all fields and exact full consumption before allocation.

decode_with_observer

Decode either the unchanged legacy packet or its explicit observer extension. The legacy decoder itself continues to reject version two.

encode

Host-side encoding with the same shape checks as the borrowed decoder.

encode_with_observer

Encode a distinct observer identity without changing legacy packet bytes.