Module ssrf_oast_review 

Pure, bounded contracts for query-only repeated-callback SSRF review.

This module performs no I/O. It validates the operator policy, reduces one structurally eligible query position, prepares three exact request targets, derives correlation material from caller-owned entropy, and evaluates raw-free lifecycle facts. Transport authority remains with WebAssessmentRuntime.

Structs

SsrfOastAdminToken

Move-only administrator credential accepted only through the CLI secret boundary.

SsrfOastPolicyId

Stable non-secret digest of one validated policy.

SsrfOastReviewPolicy

Strict operator authorization for one target origin and one OAST provider.

Enums

SsrfOastAdminTokenError

Static credential validation failure.

SsrfOastCandidateSource

Structural evidence source used solely for deterministic ranking.

SsrfOastReviewPolicyError

Static, value-free policy validation failure.

Constants

MAX_SSRF_OAST_ADMIN_TOKEN_BYTES

Maximum administrator bearer-token bytes.

MAX_SSRF_OAST_LIFETIME_MS

Maximum provider session lifetime.

MAX_SSRF_OAST_POLLS_PER_LEG

Maximum polls allowed for each dispatched callback leg.

MAX_SSRF_OAST_POLL_INTERVAL_MS

Maximum interval between bounded polls.

MAX_SSRF_OAST_PROVIDER_REQUESTS

Register, two allocations, preflight, at most seven post-dispatch polls, and cleanup.

MAX_SSRF_OAST_REVIEW_FAMILIES

V1 executes one query mutation family.

MAX_SSRF_OAST_REVIEW_PARAMETERS

V1 selects at most one query parameter.

MAX_SSRF_OAST_REVIEW_POLICY_BYTES

Hard policy-source ceiling.

MAX_SSRF_OAST_REVIEW_RESOURCES

V1 selects at most one resource.

MIN_SSRF_OAST_ADMIN_TOKEN_BYTES

Minimum administrator bearer-token bytes.

MIN_SSRF_OAST_LIFETIME_MS

Minimum provider session lifetime.

MIN_SSRF_OAST_POLLS_PER_LEG

Minimum polls allowed for each dispatched callback leg.

MIN_SSRF_OAST_POLL_INTERVAL_MS

Minimum interval between bounded polls.

SSRF_OAST_ACTIVE_VERIFICATIONS

V1 owns one logical active verification.

SSRF_OAST_REVIEW_ALGORITHM

Semantic revision for policy, candidate, mutation, and result identities.

SSRF_OAST_REVIEW_POLICY_SCHEMA

Exact purpose-oriented policy schema implemented by V1.

SSRF_OAST_TARGET_REQUESTS

Control, Candidate, and Replay are the exact target request plan.