Module digest 

Resource-description digests.

A digest covers the stable identity of one offered resource plus the immutable target-ceiling entries that apply to that resource, so a persistent host read grant stops matching when resource layout or policy changes, while a policy change on one resource does not invalidate grants on unrelated resources. Dynamic values (mapping addresses, boot IDs, handles, and the actual mapped size) are excluded.

Structs

DigestInputs

Stable inputs identifying one resource for grant matching.

Sha256Digest

A SHA-256 digest, displayed as sha256:<lowercase hex>.

Functions

combined_digest

Digest over an ordered sequence of per-resource digests, used as the whole-instance resource digest in Describe. Callers must supply a deterministic order (for example ascending resource ID).

per_resource_digests

The per-resource digests of one proxy instance, in ascending resource ID order (the order combined_digest expects).

policy_digest

Canonical digest of the immutable target-ceiling content, reported as policy_digest in Describe. Domain-separated from resource digests so the two never collide, even over identical inputs.

resource_digest

Computes the canonical digest of one resource description and its applicable ceiling slice.