Expand description
Exact versioned neutral cut envelope outside opaque Tool state. Exact neutral identity envelope around opaque Tool and backend state.
These are authenticated transport data, never native-exec authority. The registry must independently join the cut to its real scheduler/watch owner. Old descriptor-table identity originates in the trusted live guest receipt; the host does not reconstruct it from kernel descriptors or decode a Tool.
Structs§
- CutBinding
- Actual live producer identities retained by the authenticated coordinator.
Enums§
- Error
- Structural/data error, distinct from physical launch proof or Linux errno.
Constants§
- BINDING_
BYTES - Fixed identity bytes, using the existing legacy positional model encoding.
- HEADER_
BYTES - Magic, version, two exact lengths and the neutral cut identity.
- MAX_
BYTES - Maximum complete Tool/runtime frame; the bootstrap control stays 4 KiB.
Functions§
- decode
- Split only a bounded, exact frame. Its entire digest must first be checked against the independently admitted successor ticket’s expected state.
- encode_
header - Encode the exact version-2 header into preallocated storage, with no heap.