| -rw-r--r-- | .cargo/config.toml | 2L |
| -rw-r--r-- | .gitignore | 19L |
| -rw-r--r-- | .radroots-consumer-root | 1L |
| -rw-r--r-- | AGENTS.md | 415L |
| -rw-r--r-- | Cargo.lock | 3437L |
| -rw-r--r-- | Cargo.toml | 90L |
| -rw-r--r-- | LICENSE | 661L |
| -rw-r--r-- | README | 601L |
| -rw-r--r-- | contracts/api_baselines/myc.txt | 2319L |
| -rw-r--r-- | contracts/release/myc-artifact-contract.v3.json | 1L |
| -rw-r--r-- | contracts/rshr-202-step-300-gates.v1.json | 1L |
| -rw-r--r-- | contracts/services_hardening/config.v1.example.toml | 165L |
| -rw-r--r-- | contracts/services_hardening/config.v1.schema.json | 545L |
| -rw-r--r-- | contracts/services_hardening/control_plane_wave_090_a.v1.json | 51L |
| -rw-r--r-- | contracts/services_hardening/control_surfaces.v1.json | 56L |
| -rw-r--r-- | contracts/services_hardening/delivery_recovery_export.v1.json | 93L |
| -rw-r--r-- | contracts/services_hardening/diagnostics.v1.json | 61L |
| -rw-r--r-- | contracts/services_hardening/encrypted_identity_envelope.v1.json | 43L |
| -rw-r--r-- | contracts/services_hardening/local_signer_transport.v1.json | 81L |
| -rw-r--r-- | contracts/services_hardening/native_release.v2.json | 123L |
| -rw-r--r-- | contracts/services_hardening/native_release.v3.json | 119L |
| -rw-r--r-- | contracts/services_hardening/nip46_admission.v1.json | 61L |
| -rw-r--r-- | contracts/services_hardening/nip46_authorization.v1.json | 45L |
| -rw-r--r-- | contracts/services_hardening/nip46_completion.v1.json | 62L |
| -rw-r--r-- | contracts/services_hardening/nip46_pending_response.v1.json | 62L |
| -rw-r--r-- | contracts/services_hardening/nip46_replay.v1.json | 45L |
| -rw-r--r-- | contracts/services_hardening/nip46_response_commit.v1.json | 72L |
| -rw-r--r-- | contracts/services_hardening/nip46_verification.v1.json | 51L |
| -rw-r--r-- | contracts/services_hardening/nip46_wave_080_a.v1.json | 61L |
| -rw-r--r-- | contracts/services_hardening/nip46_work.v1.json | 92L |
| -rw-r--r-- | contracts/services_hardening/operator_contract.v1.json | 359L |
| -rw-r--r-- | contracts/services_hardening/process_qualification.v1.json | 79L |
| -rw-r--r-- | contracts/services_hardening/provider_contract.v1.json | 72L |
| -rw-r--r-- | contracts/services_hardening/provider_delivery.v1.json | 52L |
| -rw-r--r-- | contracts/services_hardening/provider_verification.v1.json | 70L |
| -rw-r--r-- | contracts/services_hardening/runtime_foundation.v1.json | 54L |
| -rw-r--r-- | contracts/services_hardening/runtime_supervision.v1.json | 56L |
| -rw-r--r-- | contracts/services_hardening/status_cache.v1.json | 46L |
| -rw-r--r-- | contracts/services_hardening/systemd_qualification.v1.json | 106L |
| -rw-r--r-- | contracts/services_hardening/tcp_operations.v1.json | 49L |
| -rw-r--r-- | contracts/services_hardening/wrapping_credential_resolution.v1.json | 41L |
| -rw-r--r-- | deny.toml | 64L |
| -rw-r--r-- | flake.lock | 152L |
| -rw-r--r-- | flake.nix | 185L |
| -rw-r--r-- | packaging/systemd/myc@.service | 55L |
| -rw-r--r-- | radroots.service.source-lock.v3.toml | 67L |
| -rw-r--r-- | rust-toolchain.toml | 2L |
| -rwxr-xr-x | scripts/release-acceptance.sh | 17L |
| -rwxr-xr-x | scripts/verify-boundaries.sh | 27L |
| -rwxr-xr-x | scripts/verify-supply-chain.sh | 10L |
| -rwxr-xr-x | scripts/verify-systemd.sh | 45L |
| -rw-r--r-- | src/admin_v1.rs | 2087L |
| -rw-r--r-- | src/cli_bootstrap.rs | 131L |
| -rw-r--r-- | src/cli_v1.rs | 1157L |
| -rw-r--r-- | src/config_loader.rs | 650L |
| -rw-r--r-- | src/config_v1.rs | 1419L |
| -rw-r--r-- | src/control_plane_wave_090_a.rs | 278L |
| -rw-r--r-- | src/delivery_worker.rs | 607L |
| -rw-r--r-- | src/diagnostics_v1.rs | 236L |
| -rw-r--r-- | src/doctor_v1.rs | 626L |
| -rw-r--r-- | src/lib.rs | 297L |
| -rw-r--r-- | src/main.rs | 71L |
| -rw-r--r-- | src/nip46_admission.rs | 921L |
| -rw-r--r-- | src/nip46_authorization.rs | 221L |
| -rw-r--r-- | src/nip46_replay.rs | 223L |
| -rw-r--r-- | src/nip46_verification.rs | 573L |
| -rw-r--r-- | src/nip46_wave_080_a.rs | 681L |
| -rw-r--r-- | src/nip46_wave_080_b.rs | 698L |
| -rw-r--r-- | src/nip46_work.rs | 1230L |
| -rw-r--r-- | src/operations_v1.rs | 267L |
| -rw-r--r-- | src/process_v1.rs | 1027L |
| -rw-r--r-- | src/process_v1_unsupported.rs | 27L |
| -rw-r--r-- | src/provider_contract.rs | 1399L |
| -rw-r--r-- | src/provider_credential.rs | 432L |
| -rw-r--r-- | src/provider_envelope.rs | 1449L |
| -rw-r--r-- | src/provider_executor.rs | 654L |
| -rw-r--r-- | src/provider_local_signer.rs | 1050L |
| -rw-r--r-- | src/provider_verification.rs | 1520L |
| -rw-r--r-- | src/runtime_context.rs | 163L |
| -rw-r--r-- | src/runtime_foundation.rs | 736L |
| -rw-r--r-- | src/runtime_graph.rs | 2761L |
| -rw-r--r-- | src/runtime_nip46.rs | 751L |
| -rw-r--r-- | src/runtime_signal.rs | 50L |
| -rw-r--r-- | src/runtime_supervision.rs | 310L |
| -rw-r--r-- | src/state_admin.rs | 1574L |
| -rw-r--r-- | src/state_catalog.rs | 3319L |
| -rw-r--r-- | src/state_completion.rs | 837L |
| -rw-r--r-- | src/state_config.rs | 624L |
| -rw-r--r-- | src/state_connection.rs | 2814L |
| -rw-r--r-- | src/state_delivery.rs | 2231L |
| -rw-r--r-- | src/state_discovery.rs | 1566L |
| -rw-r--r-- | src/state_governance.rs | 1497L |
| -rw-r--r-- | src/state_host.rs | 539L |
| -rw-r--r-- | src/state_maintenance.rs | 307L |
| -rw-r--r-- | src/state_metadata.rs | 633L |
| -rw-r--r-- | src/state_recovery.rs | 591L |
| -rw-r--r-- | src/state_repository.rs | 501L |
| -rw-r--r-- | src/state_request.rs | 1120L |
| -rw-r--r-- | src/state_response.rs | 1043L |
| -rw-r--r-- | src/status_v1.rs | 1115L |
| -rw-r--r-- | src/system_doctor.rs | 235L |
| -rw-r--r-- | src/transport_nostr_adapter.rs | 742L |
| -rw-r--r-- | supply-chain/audits.toml | 4L |
| -rw-r--r-- | supply-chain/config.toml | 1313L |
| -rw-r--r-- | supply-chain/imports.lock | 2L |
| -rw-r--r-- | tests/build_policy.rs | 115L |
| -rw-r--r-- | tests/package_boundary.rs | 1589L |
| -rw-r--r-- | tests/services_hardening_cli.rs | 602L |
| -rw-r--r-- | tests/services_hardening_config_contract.rs | 843L |
| -rw-r--r-- | tests/services_hardening_config_lifecycle.rs | 967L |
| -rw-r--r-- | tests/services_hardening_config_parser.rs | 48L |
| -rw-r--r-- | tests/services_hardening_connection_state.rs | 1930L |
| -rw-r--r-- | tests/services_hardening_contracts.rs | 402L |
| -rw-r--r-- | tests/services_hardening_control_surfaces.rs | 82L |
| -rw-r--r-- | tests/services_hardening_credential_resolution.rs | 153L |
| -rw-r--r-- | tests/services_hardening_delivery_state.rs | 614L |
| -rw-r--r-- | tests/services_hardening_diagnostics.rs | 148L |
| -rw-r--r-- | tests/services_hardening_discovery_state.rs | 729L |
| -rw-r--r-- | tests/services_hardening_doctor.rs | 297L |
| -rw-r--r-- | tests/services_hardening_encrypted_envelope.rs | 150L |
| -rw-r--r-- | tests/services_hardening_legacy_removal.rs | 275L |
| -rw-r--r-- | tests/services_hardening_local_signer_transport.rs | 159L |
| -rw-r--r-- | tests/services_hardening_native_release.rs | 347L |
| -rw-r--r-- | tests/services_hardening_nip46_admission.rs | 303L |
| -rw-r--r-- | tests/services_hardening_nip46_replay.rs | 294L |
| -rw-r--r-- | tests/services_hardening_nip46_verification.rs | 428L |
| -rw-r--r-- | tests/services_hardening_nip46_work.rs | 152L |
| -rw-r--r-- | tests/services_hardening_operations.rs | 235L |
| -rw-r--r-- | tests/services_hardening_process.rs | 260L |
| -rw-r--r-- | tests/services_hardening_process_qualification.rs | 462L |
| -rw-r--r-- | tests/services_hardening_provider_contract.rs | 321L |
| -rw-r--r-- | tests/services_hardening_provider_verification.rs | 149L |
| -rw-r--r-- | tests/services_hardening_runtime_context.rs | 300L |
| -rw-r--r-- | tests/services_hardening_runtime_foundation.rs | 480L |
| -rw-r--r-- | tests/services_hardening_runtime_supervision.rs | 180L |
| -rw-r--r-- | tests/services_hardening_signer_request_state.rs | 686L |
| -rw-r--r-- | tests/services_hardening_state_catalog.rs | 505L |
| -rw-r--r-- | tests/services_hardening_state_host.rs | 257L |
| -rw-r--r-- | tests/services_hardening_state_metadata.rs | 227L |
| -rw-r--r-- | tests/services_hardening_state_repository.rs | 343L |
| -rw-r--r-- | tests/services_hardening_state_resilience.rs | 415L |
| -rw-r--r-- | tests/services_hardening_status.rs | 457L |
| -rw-r--r-- | tests/services_hardening_systemd.rs | 159L |
| -rw-r--r-- | tools/xtask/Cargo.toml | 21L |
| -rw-r--r-- | tools/xtask/src/main.rs | 1816L |
| -rw-r--r-- | tools/xtask/src/rshr_202_step_300_gate.rs | 474L |
| -rw-r--r-- | tools/xtask/src/rshr_202_step_300_platform.rs | 103L |
