Module session 

Session lifecycle: identity staleness, allowlist validation, and the exclusive mutation lease.

Opening a session validates the caller’s identity expectations against the proxy instance and the entire allowlist against the resources and ceiling. A stale expectation or rejected allowlist creates no session and performs no hardware operation.

Re-exports

pub use crate::access_policy::SessionMode;

Structs

ProxyIdentity

The proxy instance identity that session expectations are validated against. Also the shape of those expectations.

RunContext

Host-supplied run context recorded with each session. Values are diagnostic provenance, not authorization.

Session

One open session.

SessionManager

Tracks open sessions, identity staleness, and the mutation lease.

Enums

OpenError

Why a session could not be opened.

Type Aliases

QuiesceHook

Callback invoked when a mutating session acquires (true) or releases (false) the exclusive mutation lease (Spec Phase 2 Section 2.2).