Know when an agent's work is actually done. Run any ACP agent in its own worktree, verify its change with your own checks run outside the agent, see the…
Data-plane blob backends for nydus: local directory, OCI registry, and proxied reads. All APIs return io::Result so the OS errno survives to the service edges.
The yubaba control-plane token format (PASETO v4 claims, audience, scopes, TTL ceiling, key encodings) and the reqwest client that attaches a peer token to…
Local data plane for nydus images: sparse blob caches, group-level fill tracking, background prefetch and on-demand access tracing. All APIs return io::Result…
The Buck2 test executor of DR-0124 §14.5: speaks Buck2's external test-executor protocol, runs each case as its own action through Buck2's orchestrator, and…
Per-call SSH-signature (SSHSIG) credentials for gRPC control planes, product-neutral: the credential a caller signs with its own OpenSSH key (method-bound,…
The estate's wall clock: HTTPS-Date / SNTP / signed-peer time, one quorum rule, step-or-slew, a report a control plane can serve, and the front's signed-time…
The ONE userspace WireGuard data plane of the nordisk appliance fleet: x25519 key handling + keygen, a wg-quick INI tokenizer, a /dev/net/tun device, a…
The remote-execution endpoint of DR-0124 §14.3–§14.4: the Remote Execution API's four services over the compute plane, under the five store rules and the…