Module liteinst_native_exec_input 

Separate, inactive native Initial/Successor bootstrap input data.

No decoder fallback to HLIINIT1 exists. Packet bytes, socket identities, nonces, tickets and digests are not admission or kernel-exec authority. A future trusted native consumer must compare independently held expectations, verify distinct protected actual sockets, and redeem its one-use instance. The runtime/Tool composite is delivered separately on the bounded state path.

Structs

ExpectedBindings

Independently held expected data, not values learned from packet decoding.

Packet

Borrowed native control fields. Decoding establishes byte shape only.

Enums

BindingMismatch

Exact data disagreement. No variant is a kernel errno or authorization.

Image

Distinct fixed fields for the two native input kinds.

Kind

The selected input shape; not a native lifecycle authorization.

PacketError

Bounded shape error with no allocated error message.

Constants

INITIAL_HEADER_LEN

Initial header, including all four variable-field lengths.

MAGIC

A protocol distinct from the unchanged HLIINIT1 packet.

MAX_PACKET_LEN

Entire control packet bound, unchanged from the existing private input ABI.

SUCCESSOR_HEADER_LEN

Successor header additionally carries the composite state digest.

VERSION

Only this wire version is admitted by the shape decoder.

Functions

decode

Validate the complete new packet shape without allocation or old fallback.

encode

Host-side encoding of the same shape. State bytes do not enter this packet.

encode_into

Encode into caller-owned storage with exactly the same wire bytes as encode. Bounds and mandatory fields are checked before the first write. No allocation or packet-supplied authentication is performed.