Module xml_external_entity_review 

Pure contracts for one bounded XML external-entity resolution review.

This module performs no I/O and parses no XML. An operator policy binds one disposable, application-contained endpoint to an exact anonymous POST carrying application/xml; charset=utf-8. The only generated documents use one external general entity and three fixed roles: Control declares but does not reference the entity, while Candidate and Replay reference independently allocated callback targets. Transport and provider authority remain with WebAssessmentRuntime.

Structs

XmlExternalEntityAdminToken

Move-only administrator credential accepted only through a secret boundary.

XmlExternalEntityClaimLimits

Explicit ceiling on claims derivable from a completed callback review.

XmlExternalEntityPolicyId

Stable non-secret digest of one validated policy.

XmlExternalEntityReviewAudit

Redaction-safe audit retained by one composed assessment report.

XmlExternalEntityReviewPolicy

Strict operator authorization for one disposable XML endpoint and provider.

Enums

XmlExternalEntityAdminTokenError

Static administrator-token validation failure.

XmlExternalEntityAuditError

Static audit-invariant failure.

XmlExternalEntityExecutionMode

Closed execution environment selected during policy validation.

XmlExternalEntityHttpMethod

Closed target method authorized by the V1 policy.

XmlExternalEntityMaximumDisposition

Maximum product disposition authorized by this evidence family.

XmlExternalEntityMediaType

Closed target media type authorized by the V1 policy.

XmlExternalEntityOperationStatus

Closed state for excluded semantic or impact operations.

XmlExternalEntityReviewOutcome

Closed, raw-free conclusion retained by the typed audit.

XmlExternalEntityReviewPolicyError

Static, value-free policy validation failure.

Constants

MAX_XML_EXTERNAL_ENTITY_ADMIN_TOKEN_BYTES

Maximum administrator bearer-token bytes.

MAX_XML_EXTERNAL_ENTITY_DOCUMENT_BYTES

Hard ceiling for one generated XML request body.

MAX_XML_EXTERNAL_ENTITY_LIFETIME_MS

Maximum provider session lifetime.

MAX_XML_EXTERNAL_ENTITY_POLLS_PER_LEG

Maximum polls allowed for each target leg.

MAX_XML_EXTERNAL_ENTITY_POLL_INTERVAL_MS

Maximum interval between bounded polls.

MAX_XML_EXTERNAL_ENTITY_PROVIDER_REQUESTS

Register, three allocations, preflight, two polls per leg, and cleanup.

MAX_XML_EXTERNAL_ENTITY_REVIEW_POLICY_BYTES

Hard policy-source ceiling.

MAX_XML_EXTERNAL_ENTITY_URL_BYTES

Hard ceiling for the exact endpoint or callback URL.

MIN_XML_EXTERNAL_ENTITY_ADMIN_TOKEN_BYTES

Minimum administrator bearer-token bytes.

MIN_XML_EXTERNAL_ENTITY_LIFETIME_MS

Minimum provider session lifetime.

MIN_XML_EXTERNAL_ENTITY_POLLS_PER_LEG

Minimum polls allowed for each target leg.

MIN_XML_EXTERNAL_ENTITY_POLL_INTERVAL_MS

Minimum interval between bounded polls.

XML_EXTERNAL_ENTITY_ACTIVE_VERIFICATIONS

V1 owns one logical active verification.

XML_EXTERNAL_ENTITY_CALLBACKS

V1 allocates one independent callback for each target leg.

XML_EXTERNAL_ENTITY_REVIEW_ACTION_ID

Stable native action identity reserved for this review.

XML_EXTERNAL_ENTITY_REVIEW_ALGORITHM

Semantic revision for policy, document, and audit invariants.

XML_EXTERNAL_ENTITY_REVIEW_AUDIT_SCHEMA

Exact raw-free audit schema implemented by V1.

XML_EXTERNAL_ENTITY_REVIEW_CAPABILITY_ID

Stable knowledge-only capability identity reserved for this review.

XML_EXTERNAL_ENTITY_REVIEW_CONTROL_MODEL

Exact control semantics used by V1.

XML_EXTERNAL_ENTITY_REVIEW_MEDIA_TYPE

Exact target media type authorized by V1.

XML_EXTERNAL_ENTITY_REVIEW_METHOD

Exact target method authorized by V1.

XML_EXTERNAL_ENTITY_REVIEW_POLICY_SCHEMA

Exact purpose-oriented policy schema implemented by V1.

XML_EXTERNAL_ENTITY_TARGET_REQUESTS

Control, Candidate, and Replay are the exact target request plan.