Module jwt_target_acceptance 

Pure domain contracts for bounded JWT target-acceptance review.

This module performs no I/O and retains no token bytes. It binds one operator-selected JSON marker to one exact-origin, application-contained GET resource, validates six ordered value-free leg facts, and derives one conservative audit conclusion. The two invalid-signature control legs are the only active legs and are admitted only after their same-stage valid and anonymous controls establish the prerequisite marker relationship.

Structs

JwtTargetAcceptanceAccounting

Derived integer accounting for one aggregate audit.

JwtTargetAcceptanceAudit

Strict value-free aggregate audit for the target portion.

JwtTargetAcceptanceLegFact

Value-free facts for exactly one ordered request role.

JwtTargetAcceptancePolicy

One strict, non-serializable target-selection policy.

Enums

JwtTargetAcceptanceActivity

Passive/active classification derived from a role.

JwtTargetAcceptanceAuditError

Static, redaction-safe aggregate validation failure.

JwtTargetAcceptanceCommitStatus

Whether response evidence was committed for a dispatched leg.

JwtTargetAcceptanceConclusion

Conservative aggregate interpretation of the three paired dimensions.

JwtTargetAcceptanceDimension

Stable candidate/replay relationship for one marker dimension.

JwtTargetAcceptanceDispatchStatus

Whether a leg was dispatched by the owning runtime.

JwtTargetAcceptanceIncompleteReason

Typed reason a complete target conclusion was unavailable.

JwtTargetAcceptanceLegFactError

Static, redaction-safe leg construction failure.

JwtTargetAcceptanceLegRole

Exact closed order of target-acceptance request roles.

JwtTargetAcceptanceLegStage

Candidate/replay stage for one ordered role.

JwtTargetAcceptanceMarkerStatus

Value-free observation of the one privately selected JSON marker.

JwtTargetAcceptanceMethod

Fixed request method admitted by the target-acceptance policy.

JwtTargetAcceptanceNotEligibleReason

Value-free reason the target portion was not eligible to run.

JwtTargetAcceptancePolicyError

Static, redaction-safe target policy failure.

JwtTargetAcceptanceResponseStatus

Completeness and JSON-marker classification state for one response.

Constants

JWT_TARGET_ACCEPTANCE_ANONYMOUS_ACTION_ID

Runtime-facing alias for the anonymous control action identifier.

JWT_TARGET_ACCEPTANCE_ANONYMOUS_CONTROL_ACTION_ID

Stable action identifier for anonymous control legs.

JWT_TARGET_ACCEPTANCE_AUDIT_SCHEMA

Stable schema identifier for the value-free target-acceptance audit.

JWT_TARGET_ACCEPTANCE_INVALID_ACTION_ID

Runtime-facing alias for the invalid-signature control action identifier.

JWT_TARGET_ACCEPTANCE_INVALID_CONTROL_ACTION_ID

Stable action identifier for invalid-signature control legs.

JWT_TARGET_ACCEPTANCE_POLICY_ID

Stable identifier for the exact-origin JSON-marker interpretation policy.

JWT_TARGET_ACCEPTANCE_POLICY_SCHEMA

Stable schema identifier for operator-supplied target policy documents.

JWT_TARGET_ACCEPTANCE_VALID_ACTION_ID

Runtime-facing alias for the valid-token baseline action identifier.

JWT_TARGET_ACCEPTANCE_VALID_BASELINE_ACTION_ID

Stable action identifier for valid-token baseline legs.

MAX_JWT_TARGET_ACCEPTANCE_ACTIVE_REQUESTS

Maximum dispatched active invalid-signature control requests.

MAX_JWT_TARGET_ACCEPTANCE_EVIDENCE_REFERENCE_BYTES

Maximum bounded opaque evidence-reference bytes.

MAX_JWT_TARGET_ACCEPTANCE_REQUESTS

Exact maximum number of role slots in one target-acceptance review.

MAX_JWT_TARGET_ACCEPTANCE_RESPONSE_BYTES

Maximum response bytes retained and interpreted for any one role.

MAX_JWT_TARGET_ACCEPTANCE_TOTAL_RESPONSE_BYTES

Maximum response bytes retained and interpreted across the complete review.