Store, validated types, bounded pipeline, no-clobber extraction

The store reads and writes the Go on-disk format (it opens the oracle's
fixture vault). Object I/O runs on one bounded worker pool with eight
reusable cleared buffers; sequential and parallel runs produce identical
bytes under seeded test randomness. Extraction publishes with
RENAME_NOREPLACE/link and only after full authentication; failed or
after-publish writes keep crash-safe ordering.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Andy Dixon
2026-10-08 10:21:44 +01:00
co-authored by Claude
parent c324f6a306
commit a6610449f2
11 changed files with 1996 additions and 8 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ hmac = "0.13"
sha2 = { version = "0.11", default-features = false }
sha3 = { version = "0.11", default-features = false }
ml-kem = { version = "0.3.2", features = ["zeroize", "hazmat"] }
zeroize = { version = "1.9", features = ["derive"] }
zeroize = { version = "1.9", features = ["derive", "serde"] }
getrandom = "0.4"
base64 = "0.23"
serde = { version = "1", features = ["derive"] }