Skip to content

symfonic.services.switching.attestation

attestation

The keyset-backed continuation attestor (CORE-194 NoMemory durable resume).

Reached only through the declared port :meth:EnvelopeSigner.continuation_attestor. It exposes no public MAC method: the kernel's continuation_attestation module is its only caller, and it seals only for a run it judged a memory-free root while that run was live.

KeysetContinuationAttestor 

KeysetContinuationAttestor(keyset: Keyset)

Bases: ContinuationAttestorPort

Attest with a key derived inside keyset; material never leaves it.

Source code in src/symfonic/services/switching/attestation.py 
22
23
24
25
def __init__(self, keyset: Keyset) -> None:
    if type(keyset) is not Keyset:
        raise TypeError("a continuation attestor needs the symfonic Keyset")
    self._keyset = keyset