Module web_runtime

Expand description

Host-facing runtime for the standard deterministic web decision stack.

§Runtime scope

Build: default via scanning.
Execution: Surface B — this is StandardWebDecisionRuntime, invoked by the canonical termivar scan, its deprecated decision-scan alias, the examples/decision_scan.rs reference host, and external library hosts.
Default termivar scan: yes.
Support: implemented and tested.

See docs/internals/runtime-map.md.

The runtime owns composition and bounded command driving. Domain layers remain independently testable and the caller remains responsible for target authorization and HTTP evidence policy.

Re-exports§

pub use crate::supplied_session_review::MAX_SUPPLIED_SESSION_CHECKPOINTS;
pub use crate::supplied_session_review::MAX_SUPPLIED_SESSION_REQUESTS;
pub use crate::supplied_session_review::MAX_SUPPLIED_SESSION_RESOURCES;
pub use crate::xml_external_entity_review::XmlExternalEntityExecutionMode;
pub use crate::xml_external_entity_review::XmlExternalEntityReviewAudit;
pub use crate::xml_external_entity_review::XmlExternalEntityReviewOutcome;
pub use crate::xml_external_entity_review::XML_EXTERNAL_ENTITY_ACTIVE_VERIFICATIONS;
pub use crate::xml_external_entity_review::XML_EXTERNAL_ENTITY_REVIEW_ACTION_ID;
pub use crate::xml_external_entity_review::XML_EXTERNAL_ENTITY_REVIEW_AUDIT_SCHEMA;
pub use crate::xml_external_entity_review::XML_EXTERNAL_ENTITY_REVIEW_CAPABILITY_ID;
pub use crate::xml_external_entity_review::XML_EXTERNAL_ENTITY_TARGET_REQUESTS;

Structs§

ApiVisibilityContextProbe: One host-declared authorization context and its bodyless HTTP probe.
ApiVisibilityDifferentialAudit: Monotonic transport audit retained on every post-start exit.
ApiVisibilityDifferentialRequest: A fully validated, explicit JSON authorization-context pair.
ApiVisibilityLegReceipt: Raw-value-free transport receipt for one completed leg.
AssessmentCaseReference: Opaque deterministic reference to one verification case.
AssessmentDifferentialBasis: Matched or atomically paired evidence basis for a review item.
AssessmentEvidenceReference: Opaque deterministic reference to one retained evidence record.
AssessmentItem: Read-only product projection from deterministic runtime truth.
AssessmentObservationBasis: Evidence basis for an informational observation.
AssessmentOutcomeReference: Opaque deterministic reference to one verifier outcome.
AssessmentRemediation: Static remediation metadata owned by a native capability.
AssessmentRunReport: A validated, bounded assessment-run product envelope.
AssessmentSubjectReference: Opaque deterministic reference to one canonical assessment subject.
AssessmentVerifierBasis: Verifier-owned basis for a confirmed item.
BuiltInScanProfileParseError: An input was not one of the exact built-in profile identifiers.
RuntimeApiVisibilityRunReport: Complete audit report for a successful or safely stopped pair.
ScanProfileCapabilitiesV1: Closed capability manifest for a v1 profile.
ScanProfileLimitsV1: Complete serialized resource envelope for a v1 assessment profile.
ScanProfileV1: A validated venom.scan-profile/v1 product profile.
StandardWebDecisionFailureReceipt: Completed audit history retained when a started runtime returns an error.
StandardWebDecisionRunReport: Complete audit trail from bootstrap evidence to a terminal command.
StandardWebDecisionRuntime: Single-use target runtime for evidence collection and deterministic decisions.
StandardWebDecisionRuntimeBuilder: Builder for one target-scoped StandardWebDecisionRuntime.
SuppliedSessionCookieLifecycleAudit: Redaction-safe dynamic cookie lifecycle aggregate for audit V2.
SuppliedSessionCookiePolicyAudit: Redaction-safe static cookie-policy aggregate for audit V2.
SuppliedSessionHealthOracleAudit: Value-free description of the configured health oracle.
SuppliedSessionOAuthAuthorizationAudit: Value-safe collection facts. Inbound callback reservation is distinct from outgoing token/health/resource requests; both use the same parent ledger.
SuppliedSessionOAuthCodeAudit: Value-free V5 acquisition facts. It is not an executable IdP permit.
SuppliedSessionOAuthInitiatedTokenAudit: V7 exposes only token-exchange facts, without relabelling the historical external-transaction audit or asserting OIDC nonce/signature validation.
SuppliedSessionOAuthRefreshAudit: Value-free renewal facts; neither saved state nor this audit mints a permit.
TlsLeafObservation: Value-safe reduction of one unique parsed peer leaf certificate.
WebAssessmentAuthorizationAudit: Redaction-safe audit embedded in the composed assessment report.
WebAssessmentDefenseAudit: Bounded defense audit composed from exact committed subject receipts.
WebAssessmentDefenseObservation: One committed confidence-graded defense observation. A fingerprint is a product hint only, never a categorical WAF-presence claim.
WebAssessmentDefenseShadowPlan: Exact policy-authorized plan and its read-only defense-aware subsequence.
WebAssessmentDefenseTransition: Positive-only matched control/candidate defense delta.
WebAssessmentFailureReceipt: Durable outer audit retained when a started assessment fails.
WebAssessmentForm: One canonical same-origin form observation.
WebAssessmentLimits: Checked resource and discovery envelope for one origin assessment.
WebAssessmentOpenApiAudit
WebAssessmentProgressObserver: Read-only live observation handle for one opted-in assessment.
WebAssessmentProgressSnapshot: A safe, last-observed view of live assessment accounting.
WebAssessmentReconCtProviderAudit: Runtime-owned provider audit plus the transport-neutral parsed result.
WebAssessmentRestAudit: Bounded, raw-value-free audit for the optional REST child.
WebAssessmentRootAuthorizationContext: Host-supplied complete Authorization header value for the authorized root.
WebAssessmentRunReport: Complete origin-assessment audit with exactly one global transport view.
WebAssessmentRuntime: Single-use deterministic assessment of one authorized exact origin.
WebAssessmentRuntimeBuilder: Builder for one bounded exact-origin assessment.
WebAssessmentSecretExposureAudit: Complete selected-run audit. It intentionally contains no matched bytes, fragments, reversible encoding, or digest of secret material.
WebAssessmentSsrfOastAudit: Redaction-safe audit retained by the one composed assessment report.
WebAssessmentSubject: One canonical query-free assessment subject.
WebAssessmentSubjectReport: One subject’s standard decision audit without duplicated global accounting.
WebAssessmentSuppliedSessionAudit: Redaction-safe audit for one explicitly selected supplied-session child.
WebAssessmentSuppliedSessionCheckpointAudit: One value-free, actually dispatched health checkpoint.
WebAssessmentSuppliedSessionResourceAudit: One selected protected resource and its value-free execution result.
WebAssessmentTlsNegotiationReviewAudit: Value-free bounded active TLS matrix produced by one assessment authority.
WebAssessmentTlsNegotiationReviewCell: One fixed row in the bounded negotiation matrix.
WebAssessmentTlsObservationAudit: Immutable assessment-level passive TLS audit.
WebAssessmentUsage: Aggregate monotonic usage for one assessment authority.
WebAssessmentWebSocketReviewAudit: Redaction-safe result of one selected WebSocket protocol review.
WebAssessmentWordPressAudit: Redaction-safe, transport-free WordPress interpretation retained by one completed assessment. It deliberately has no Serde implementation.
WebAssessmentWordPressDiscoveryAudit: Versioned, redaction-safe discovery audit retained beside the legacy transport-free WordPress review audit.
WebSocketReviewExecutionLimits: Effective numeric ceilings attached to the audit.
WebSocketReviewMessageAudit: Payload-free audit of one configured exchange.
WordPressAssetFingerprintExecution
WordPressAssetFingerprintResourceReceipt
WordPressDiscoverySourceAudit: Redaction-safe result for one deterministic metadata candidate.
WordPressPageAudit: Redaction-safe record for one selected non-entry page.
WordPressPageScopeAudit: Separate bounded accounting for explicit page-scoped discovery.
WordPressPluginDiscoveryMetadata: Bounded fields retained from one plugin distribution readme.
WordPressThemeDiscoveryMetadata: Bounded fields retained from one theme stylesheet header.

Enums§

ApiVisibilityDifferentialDisposition: Terminal handling state for one single-use differential runtime.
ApiVisibilityDifferentialRequestError: Validation failure for an authorization-context pair.
ApiVisibilityInconclusiveReason: Why a complete comparison could not be produced.
ApiVisibilityLeg: Which half of a differential pair produced a receipt or stop.
AssessmentBasis: Typed authority that produced an assessment item.
AssessmentConfirmationDenial: Stable reason a verifier outcome was denied confirmation authority.
AssessmentDisposition: Product-facing claim disposition.
AssessmentItemProjectionError: Fail-closed projection errors.
AssessmentRunReportError: Invalid relationship in a typed assessment-run envelope.
BuiltInScanProfile: One of the two product profiles implemented by the deterministic runtime.
OpenApiCandidateSource
OpenApiRuntimeOutcome
ReconCtProviderFailureKind: Stable, value-free classification for the first provider execution failure.
RestObservedMediaClass: Reduced media class retained by the public assessment audit.
RestRuntimeOutcome: Closed runtime outcome for one selected read-only REST operation.
RuntimeApiVisibilityError: Failure while using paired API visibility reasoning through a web runtime.
RuntimeApiVisibilityExecutionError: Failure after configuration validation that cannot be represented as a safe target outcome. Each post-start variant preserves transport audit.
ScanProfileScope: Network scope selected by a versioned scan profile.
ScanProfileSelectionError: Failure to select or construct a built-in v1 profile.
ScanProfileV1Error: Invalid relationship inside a v1 profile.
SecretExposureDetectorClass: Closed public meaning of a detector match.
SecretExposureResponseOutcome: Closed reason one selected response was or was not evaluated.
SsrfOastProviderFailure: Bounded provider diagnostics, separate from review or cleanup completion.
SsrfOastRuntimeOutcome: Closed, raw-free runtime conclusion.
StandardWebDecisionRuntimeError: Construction and execution failures for StandardWebDecisionRuntime.
StandardWebDecisionRuntimeTurn: One non-terminal audit record produced while driving a runtime session.
SuppliedSessionAuditOutcome: Overall bounded child outcome.
SuppliedSessionBodyState: Completeness of a health-check response body.
SuppliedSessionCoverage: Authenticated resource coverage established by committed resource responses and checkpoints.
SuppliedSessionHealthCheckpointPhase: Position of one health check in the fixed schedule.
SuppliedSessionHealthOracleKind: The closed health predicate implemented by V1.
SuppliedSessionHealthOutcome: Health interpretation at one actually dispatched checkpoint.
SuppliedSessionLoginFormOutcome: Value-free result of selecting the one policy-bound login form.
SuppliedSessionLoginSubmitOutcome: Value-free result of the single login POST.
SuppliedSessionOAuthAuthorizationOutcome: Closed reception result, not an identity/authentication verdict.
SuppliedSessionOAuthCodeOutcome: Closed result of the single selected IdP operation, separate from health.
SuppliedSessionOAuthRefreshOutcome
SuppliedSessionPredicateOutcome: Whether the closed health predicate was evaluated successfully.
SuppliedSessionPrincipalAssurance: Assurance attached to the principal label used for this run.
SuppliedSessionResourceOutcome: Outcome of one selected protected-resource request.
TlsCertificateTimeStatus: Relationship between a leaf’s validity window and its observation instant.
TlsObservationTargetScheme: Scheme selected by the assessment authority.
WebAssessmentAuthorizationContextError: Static, value-free authorization-context validation failure.
WebAssessmentCompletion: Whether every retained subject and eligible document completed within bounds.
WebAssessmentDefenseBodyCoverage: Bounded body coverage used for a defense observation. This describes only the detector input; it never claims exhaustive response-body analysis.
WebAssessmentDefenseMode: Whether defense is observation-only or monotonically enforced.
WebAssessmentFormMethod: HTML form method retained without dispatching POST or dialog actions.
WebAssessmentIncompleteReason: A bounded condition that prevented exhaustive assessment execution.
WebAssessmentLimitsError: Invalid configuration for a bounded web assessment.
WebAssessmentMethod: Safe method boundary retained for an assessment subject.
WebAssessmentProgressCheckpoint: Coarse orchestration boundary associated with a live assessment snapshot.
WebAssessmentRuntimeError: Construction and execution failures for WebAssessmentRuntime.
WebAssessmentSubjectOrigin: Provenance class for one canonical subject.
WebSocketReviewClaimLimit: Conservative limits on conclusions supported by the bounded exchange.
WebSocketReviewCompleteness: Completeness of the exact operator-configured message exchange.
WebSocketReviewFailureKind: Value-free classification of the first execution failure.
WebSocketReviewMessageStatus: Result of one configured outbound message and its next application response.
WebSocketReviewTerminal: Coarse terminal state of one selected WebSocket review.
WordPressAssetFingerprintAcquisition
WordPressAssetFingerprintResourceOutcome
WordPressDiscoverySourceKind: Closed public-metadata source classes.
WordPressDiscoverySourceOutcome: Bounded terminal state for one candidate.
WordPressPageAcquisition: How one selected non-entry representation became available.
WordPressPageAssociation: Whether a selected page could be associated with the frozen application.
WordPressPageOutcome: Bounded terminal state for one selected first-hop page.
WordPressPageScope: Explicit breadth selected for WordPress page-scoped metadata discovery.

Constants§

ASSESSMENT_ITEM_SCHEMA: Stable schema carried by every assessment item.
ASSESSMENT_RUN_REPORT_SCHEMA: Stable schema for the typed assessment-run product envelope.
BASELINE_SCAN_PROFILE_ID: Exact built-in identifier for conservative single-resource behavior.
BASELINE_SCAN_PROFILE_MAX_TOTAL_REQUESTS: Request ceiling used by the unchanged default single-resource CLI path.
BASELINE_SCAN_PROFILE_MAX_TOTAL_RESPONSE_BYTES: Cumulative response-byte ceiling used by the unchanged default CLI path.
BASELINE_SCAN_PROFILE_MAX_WALL_TIME_MS: Wall-clock ceiling used by the unchanged default single-resource CLI path.
DEFAULT_WEB_ASSESSMENT_MAX_ACTIVE_VERIFICATIONS: Default maximum active verification dispatches: seven for the initial native review pass, one context-selected XSS structural family, and two for one explicitly supplied authorization pair. Callers may select a lower ceiling; exhaustion remains fail-closed.
DEFAULT_WEB_ASSESSMENT_MAX_CANONICAL_URL_BYTES: Default maximum byte length of one canonical query-free URL.
DEFAULT_WEB_ASSESSMENT_MAX_CONTROLS_PER_FORM: Default maximum distinct control names retained for one form.
DEFAULT_WEB_ASSESSMENT_MAX_DEPTH: Default maximum discovery depth after the authorized root.
DEFAULT_WEB_ASSESSMENT_MAX_FORMS: Default maximum number of forms retained by one assessment.
DEFAULT_WEB_ASSESSMENT_MAX_QUERY_NAMES: Default maximum distinct query names retained for one route or form action.
DEFAULT_WEB_ASSESSMENT_MAX_REFERENCES_PER_DOCUMENT: Default maximum distinct route references retained from one document.
DEFAULT_WEB_ASSESSMENT_MAX_RESPONSE_BODY_BYTES: Default per-response body retention ceiling.
DEFAULT_WEB_ASSESSMENT_MAX_RETAINED_URL_BYTES: Default maximum bytes charged once per distinct canonical URL identity.
DEFAULT_WEB_ASSESSMENT_MAX_SUBJECTS: Default maximum canonical subjects retained by one assessment.
DEFAULT_WEB_ASSESSMENT_MAX_TOTAL_REQUESTS: Default maximum broker-owned dispatches for one assessment.
DEFAULT_WEB_ASSESSMENT_MAX_TOTAL_RESPONSE_BYTES: Default cumulative response-byte ceiling.
DEFAULT_WEB_ASSESSMENT_MAX_WALL_TIME: Default complete-assessment wall-clock ceiling.
HARD_MAX_WEB_ASSESSMENT_ACTIVE_VERIFICATIONS: Compiled maximum active verification dispatches.
HARD_MAX_WEB_ASSESSMENT_CANONICAL_URL_BYTES: Compiled maximum byte length of one canonical query-free URL.
HARD_MAX_WEB_ASSESSMENT_CONTROLS_PER_FORM: Compiled maximum distinct control names retained for one form.
HARD_MAX_WEB_ASSESSMENT_DEPTH: Compiled maximum discovery depth after the authorized root.
HARD_MAX_WEB_ASSESSMENT_FORMS: Compiled maximum number of forms retained by one assessment.
HARD_MAX_WEB_ASSESSMENT_QUERY_NAMES: Compiled maximum distinct query names retained for one route or form action.
HARD_MAX_WEB_ASSESSMENT_REFERENCES_PER_DOCUMENT: Compiled maximum distinct route references retained from one document.
HARD_MAX_WEB_ASSESSMENT_RESPONSE_BODY_BYTES: Compiled maximum retained bytes for one response body.
HARD_MAX_WEB_ASSESSMENT_RETAINED_URL_BYTES: Compiled maximum bytes charged once per distinct canonical URL identity.
HARD_MAX_WEB_ASSESSMENT_SUBJECTS: Compiled maximum canonical subjects retained by one assessment.
HARD_MAX_WEB_ASSESSMENT_TOTAL_REQUESTS: Compiled request ceiling; this includes the later 10,000-request benchmark.
HARD_MAX_WEB_ASSESSMENT_TOTAL_RESPONSE_BYTES: Compiled cumulative response-byte ceiling.
HARD_MAX_WEB_ASSESSMENT_WALL_TIME: Compiled complete-assessment wall-clock ceiling.
MAX_ASSESSMENT_CAPABILITY_ID_BYTES: Maximum bytes in one static capability identifier.
MAX_ASSESSMENT_DISPLAY_BYTES: Maximum bytes in one static display field.
MAX_ASSESSMENT_ITEM_EVIDENCE_REFERENCES: Maximum retained evidence references for one assessment item.
MAX_ASSESSMENT_ITEM_SET_ITEMS: Maximum number of items one projection authority can retain.
MAX_ASSESSMENT_RUN_ITEMS: Maximum number of typed assessment items retained by one run report.
MAX_AUTHORIZATION_REVIEW_ACTIVE_VERIFICATIONS: The four request legs form one logical active verification.
MAX_AUTHORIZATION_REVIEW_REQUESTS: V1 dispatches exactly four independently accounted request legs.
MAX_AUTHORIZATION_REVIEW_RESOURCES: V1 selects exactly one operator-declared resource.
MAX_OPENAPI_REVIEW_ACTIVE_VERIFICATIONS
MAX_OPENAPI_REVIEW_DOCUMENTS
MAX_OPENAPI_REVIEW_REQUESTS
MAX_REST_REVIEW_ACTIVE_VERIFICATIONS
MAX_REST_REVIEW_REQUESTS
MAX_REST_REVIEW_RESOURCES
MAX_SECRET_EXPOSURE_BODY_BYTES: Largest complete textual response accepted by this detector.
MAX_SECRET_EXPOSURE_OCCURRENCES: Maximum total matched occurrences retained as value-free counters.
MAX_SECRET_EXPOSURE_RESPONSES: Maximum committed response outcomes accepted from the parent assessment.
MAX_SECRET_EXPOSURE_RETAINED_OBSERVATIONS: Maximum value-free matched subject/class observations retained per run.
MAX_SECRET_EXPOSURE_TOTAL_BODY_BYTES: Maximum response bytes admitted to detector work across one assessment.
MAX_SSRF_OAST_REVIEW_ACTIVE_VERIFICATIONS
MAX_SSRF_OAST_REVIEW_PARAMETERS
MAX_SSRF_OAST_REVIEW_PROVIDER_REQUESTS
MAX_SSRF_OAST_REVIEW_REQUESTS
MAX_SSRF_OAST_REVIEW_RESOURCES
MAX_TLS_CERTIFICATE_EXTENSIONS: Maximum shallow X.509 extension records admitted per peer leaf.
MAX_TLS_LEAF_CERTIFICATE_BYTES: Maximum peer leaf DER bytes inspected per response.
MAX_TLS_RETAINED_LEAF_OBSERVATIONS: Maximum unique peer leaves retained per assessment.
MAX_TLS_SAN_ENTRIES_PER_CERTIFICATE: Maximum SAN entries classified per retained peer leaf.
MAX_TLS_SUBJECT_ALTERNATIVE_NAME_BYTES: Maximum raw Subject Alternative Name extension bytes parsed per peer leaf.
MAX_WEBSOCKET_REVIEW_APPLICATION_BYTES_PER_DIRECTION: Aggregate application payload admitted in either direction.
MAX_WEBSOCKET_REVIEW_CONNECTIONS: Exactly one connection attempt can be made by one selected review.
OPENAPI_REVIEW_ACTION_ID
OPENAPI_REVIEW_CAPABILITY_ID
RESOURCE_AUTHORIZATION_REVIEW_ACTION_ID: The one optional native action installed by Resource Authorization Review V1.
RESOURCE_AUTHORIZATION_REVIEW_CAPABILITY_ID: Stable AssessmentItem capability emitted only by exact positive truth.
REST_REVIEW_ACTION_ID
REST_REVIEW_CAPABILITY_ID
SCAN_PROFILE_V1_SCHEMA: Exact schema identifier for the first deterministic scan-profile contract.
SECRET_EXPOSURE_AUDIT_SCHEMA
SECRET_EXPOSURE_CATALOGUE_ID
SECRET_EXPOSURE_CATALOGUE_REVISION
SECRET_EXPOSURE_POLICY_ID
SECRET_EXPOSURE_REPRESENTATION
SSRF_OAST_REVIEW_ACTION_ID
SSRF_OAST_REVIEW_CAPABILITY_ID
SUPPLIED_SESSION_AUDIT_SCHEMA: Stable saved-audit schema for the supplied-session child.
SUPPLIED_SESSION_CAPABILITY_ID: Stable capability identity. This audit-only V1 emits no assessment item.
SUPPLIED_SESSION_COOKIE_AUDIT_SCHEMA: Strict saved-audit schema for supplied-cookie sessions.
SUPPLIED_SESSION_FORM_LOGIN_AUDIT_SCHEMA: Strict saved-audit schema for one bounded form-login transition.
SUPPLIED_SESSION_OAUTH_AUTHORIZATION_AUDIT_SCHEMA: V7 client-generated authorization and a separately committed token exchange.
SUPPLIED_SESSION_OAUTH_CODE_AUDIT_SCHEMA: Imported-code acquisition plus the existing independently qualified health loop.
SUPPLIED_SESSION_OAUTH_REFRESH_AUDIT_SCHEMA: V6 records one explicitly scheduled, separately committed OAuth renewal.
SUPPLIED_SESSION_RENEWAL_AUDIT_SCHEMA: Scheduled supplied-cookie renewal audit, preserving the historical audits.
TLS_NEGOTIATION_REVIEW_ACTION_TLS12: Parent-accounted action identity for the TLS 1.2 cell.
TLS_NEGOTIATION_REVIEW_ACTION_TLS13: Parent-accounted action identity for the TLS 1.3 cell.
TLS_NEGOTIATION_REVIEW_AUDIT_SCHEMA: Stable audit schema for the active TLS matrix.
TLS_NEGOTIATION_REVIEW_CAPABILITY_ID: Stable capability identity for active TLS negotiation review.
TLS_NEGOTIATION_REVIEW_POLICY_ID: Stable policy identity for the fixed initial matrix.
TLS_OBSERVATION_AUDIT_SCHEMA: Schema of the immutable TLS observation audit.
TLS_OBSERVATION_BACKEND_LIMIT: Value used for facts that reqwest’s public metadata surface does not expose.
TLS_OBSERVATION_CLOCK_ASSURANCE: Assurance attached to the local wall clock used for validity classification.
TLS_OBSERVATION_POLICY_ID: Policy governing observation of an existing validated connection.
TLS_OBSERVATION_REVOCATION_STATUS: Revocation scope of this passive observer.
TLS_OBSERVATION_SOURCE_SCOPE: Privacy-preserving source scope for every retained observation.
TLS_OBSERVATION_VALIDATION_SCOPE: Scope of the standard transport-validation statement.
WEBSOCKET_REVIEW_ACTION_ID: Semantic action charged to the parent request-accounting authority.
WEBSOCKET_REVIEW_AUDIT_SCHEMA: Schema of the immutable WebSocket review audit.
WEBSOCKET_REVIEW_AUTHENTICATION: Authentication shape implemented by V1.
WEBSOCKET_REVIEW_CAPABILITY_ID: Stable identity of this opt-in capability.
WEBSOCKET_REVIEW_HTTP2_EXTENDED_CONNECT: HTTP/2 extended CONNECT is outside the V1 implementation.
WEBSOCKET_REVIEW_TRANSPORT: Transport shape implemented by V1.
WEBSOCKET_REVIEW_TRANSPORT_BYTE_SCOPE: Byte-counting layer used for partial failures and timeouts.
WEBSOCKET_SUPPLIED_SESSION_AUDIT_SCHEMA: Schema of a WebSocket review bound to one supplied-session health window.
WEB_ASSESSMENT_CONCURRENCY: Assessment subjects execute sequentially under one shared authority.
WEB_REVIEW_SCAN_PROFILE_ID: Exact built-in identifier for bounded exact-origin review.
WORDPRESS_DISCOVERY_OBSERVATION_CAPABILITY_ID: Observation-only item that retains document-local references for fetched metadata without changing the root-surface item’s meaning.
WORDPRESS_REVIEW_CAPABILITY_ID: Observation-only product item emitted when the root response carried at least one supported structured WordPress hint.

Functions§

recon_ct_provider_scope_is_valid: Validates the provider child authority against the selected assessment.
tls_negotiation_review_target_is_supported: Returns whether an explicitly selected URL can be represented by the active TLS matrix’s exact DNS host/SNI/port authority.

Module web_runtime

Module web_runtime Copy item path

§Runtime scope

Re-exports§

Structs§

Enums§

Constants§

Functions§

Module web_runtime