PtcRunner.Kernel.HostRuntimePayload (PtcRunner v0.14.0)

Copy Markdown View Source

Internal sealed transport for credential-bearing host runtime configuration.

The authenticated ciphertext prevents credentials from appearing in normal struct inspection or accidental term logging while the payload crosses trusted Kernel boundaries. Its key is VM-local process state, so this is not a confidentiality boundary against trusted code running in the same VM, memory inspection, or crash dumps. Callers must apply the same operational protections to VM diagnostics and dumps as to the original host config.

Summary

Types

t()

Functions

activate(payload)
binding(payload)
bound_to?(payload, binding)
invoke(payload, request)
resolve_credentials(payload, names)
seal(host)

Types

t()

@opaque t()

Functions

activate(payload)

@spec activate(t()) :: {:ok, struct()} | {:error, term()}

binding(payload)

@spec binding(t()) :: {:ok, binary()} | {:error, :invalid_host_runtime_payload}

bound_to?(payload, binding)

@spec bound_to?(term(), binary()) :: boolean()

invoke(payload, request)

@spec invoke(t(), term()) :: term()

resolve_credentials(payload, names)

@spec resolve_credentials(t(), [binary()]) ::
  {:ok, %{required(binary()) => binary()}} | {:error, term()}

seal(host)

@spec seal(PtcRunner.Kernel.HostConfig.t()) ::
  {:ok, t()} | {:error, :invalid_host_runtime_payload}