Module backend_hook 

The one statically selected application’s physical-backend boundary.

An executable supplies one concrete adapter to super::main_with_backend. The common application still owns entry, argument parsing, input snapshots, run disposition, comparison and publication. In particular neither a physical capture nor backend facts are a verification verdict.

Re-exports

pub use hermit::canonical_verdict::VerificationRun;

Structs

BackendOption

A new option. Its value parser is arbitrary; its relations are confined to the same extension schema. There is deliberately no core Command/Arg editor or overrides_with operation at this boundary.

BackendOptionGroup

An extension-only option group. Existing application groups remain intact.

CapturedOutput

What the physical callback actually observed, before common latch checks.

ContainerScope

A controlled physical launch with the application’s mounts and bounds.

CoordinatorTracing

Private common tracing configuration retained until ordinary execution.

CoordinatorTracingGuard

ExecutableOverlay

A preprocessor’s resolved executable paths, constructed only by the maintained common resolver. Installing it rechecks the complete plan against the receiving invocation, then applies the existing readonly overlay ordering, mount-target and source-visibility rules.

Execute

One physical-operation request. Common comparison options are not writable through it. A verification capture receives its actual log and run label.

MountArg

A parsed mount specification retained exactly for command reconstruction. A --mount: the mount, and the spec it was parsed from, so that a rendered command line (hermit analyze’s reproducers) passes the same mount again. Reverie’s Mount does not give its fields back, and some (its flags, data, pinned source) have no spec syntax.

NativeFacts

All native equality dimensions are mandatory and retain their exact types. statistics_diagnostic is the validated full snapshot’s original Debug spelling; it is only diagnostic text, never an equality predicate.

Observation

OptionSchema

Add only extension options/groups to an existing command path ([] is root). One final composed schema is used for CLI/config/replay and pending stamps.

PhysicalRun

Exact physical output plus deferred state, without a verdict.

Prepare

Common inputs already admitted by the application. The stdin owner moves here once; a session must retain its replay state for a verification pair.

RunLatches

What one verification run recorded that makes its records untrustworthy, carried out of the run’s container process. Verification checks it before any comparison, independently of what reached the log: a lost or failed write can leave a log that reads complete.

SavedNativeArtifact

Immutable locator for the exact native payload written by the core owner. Possessing this artifact does not publish or admit a saved verification run.

SavedNativeEvidence

Backend-owned, already validated native record bytes. The core owns their filename, create-new writes, synchronization, record metadata and publication order. The backend owns their existing decoder, never the comparison verdict.

SavedNativeEvidenceRef

The actual raw payload and recorded initialization count read by the core. A static adapter must decode them before returning its complete typed facts.

TerminalDeadlockGuard

Affine ownership of the common scheduler’s temporary deadlock report hook.

VerificationCapture

VerificationCommand

Admitted physical inputs. These carry no comparator or verdict authority.

Enums

EvidenceRequirement

Immutable requirements declared before any physical run.

Execution

Mode

The operation whose physical execution the application is preparing.

PairEvidence

VerificationLogTransport

The real source of this adapter’s verification records. This is declared before preparation; no empty/default transport can omit a required source.

Traits

BackendAdapter

One statically linked physical adapter, never a registry or a verdict owner.

Functions

controller_diagnostic

The common nonwaiting diagnostic channel for a physical adapter’s existing preparation banner. This does not select a log filter, writer or verdict. The original macro keeps the current invocation’s log-cap policy.

write_pending_verification_json

Stamp only the common invocation-bound pending NO-RESULT report. This is the same fixed operation used by the shared application and saved comparison; terminal verdicts and their publication remain owned by the common driver. Publish an explicit NO-RESULT record to path before verification starts.