C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
35 lines
1.4 KiB
C++
35 lines
1.4 KiB
C++
#ifndef PYGREENLET_HPP
|
|
#define PYGREENLET_HPP
|
|
|
|
|
|
#include "greenlet.h"
|
|
#include "greenlet_compiler_compat.hpp"
|
|
#include "greenlet_refs.hpp"
|
|
|
|
|
|
using greenlet::refs::OwnedGreenlet;
|
|
using greenlet::refs::BorrowedGreenlet;
|
|
using greenlet::refs::BorrowedObject;;
|
|
using greenlet::refs::OwnedObject;
|
|
using greenlet::refs::PyErrPieces;
|
|
|
|
|
|
// XXX: These doesn't really belong here, it's not a Python slot.
|
|
static OwnedObject internal_green_throw(BorrowedGreenlet self, PyErrPieces& err_pieces);
|
|
|
|
static PyGreenlet* green_new(PyTypeObject* type, PyObject* UNUSED(args), PyObject* UNUSED(kwds));
|
|
static int green_clear(PyGreenlet* self);
|
|
static int green_init(PyGreenlet* self, PyObject* args, PyObject* kwargs);
|
|
static int green_setparent(PyGreenlet* self, PyObject* nparent, void* UNUSED(context));
|
|
static int green_setrun(PyGreenlet* self, PyObject* nrun, void* UNUSED(context));
|
|
static int green_traverse(PyGreenlet* self, visitproc visit, void* arg);
|
|
static void green_dealloc(PyGreenlet* self);
|
|
static PyObject* green_getparent(PyGreenlet* self, void* UNUSED(context));
|
|
|
|
static int green_is_gc(PyObject* self);
|
|
static PyObject* green_getdead(PyGreenlet* self, void* UNUSED(context));
|
|
static PyObject* green_getrun(PyGreenlet* self, void* UNUSED(context));
|
|
static int green_setcontext(PyGreenlet* self, PyObject* nctx, void* UNUSED(context));
|
|
static PyObject* green_getframe(PyGreenlet* self, void* UNUSED(context));
|
|
static PyObject* green_repr(PyGreenlet* self);
|
|
#endif
|