All Classes and Interfaces

Class	Description
AllowAllAuthorizationPolicy	Development policy that allows every request.
AllowAllResourcePolicy	Development resource policy that allows every request.
AuditChainVerificationResult	Result of tamper-evident audit-chain verification.
BootstrapEndpointResolver	Resolves a bootstrap registry endpoint to a registry client.
BootstrapRegistryClient	Bootstrap-hint registry discovery client.
BootstrapRegistryOptions	Immutable bootstrap discovery options.
BootstrapRegistryServer	Explicit read-only mTLS bootstrap registry endpoint.
BreakGlassPolicyHook	Break-glass policy hook that requires mandatory audit.
BuiltInComplianceProfiles	Built-in conservative profile catalog for regulated-readiness evidence.
ComplianceAdmin	Read-only formatter for compliance posture reports.
CryptoPolicy	Enterprise cryptographic posture policy.
CryptoPolicyEvaluator	Evaluates the current JVM cryptographic posture against a configured policy.
CryptoPostureReport	Safe cryptographic posture report.
CryptoProviderPolicy	Provider and algorithm allow-list policy.
DefaultComplianceReportService	Builds conservative compliance reports from collected evidence.
DefaultEvidenceExporter	Exports compliance reports as JSON, Markdown, or CSV without external dependencies.
DefaultRedactor	Default redactor for public diagnostics and audit metadata.
DenyAllAuthorizationPolicy	Safety policy that denies every request.
DenyAllResourcePolicy	Fail-closed resource policy that denies every request.
DeterministicPdpClient	Deterministic PDP adapter for tests and demos.
DeterministicRegistryRecordSigner	Deterministic test signer/verifier for registry records.
DeterministicReleaseAttestationVerifier	Deterministic verifier for tests and demos.
EmbeddedRegistryClient	Thread-safe in-memory registry implementation for Phase 1.
EmbeddedRegistryStore	Shared in-memory registry store.
EnvelopeEncryptionService	Thread-safe envelope encryption SPI.
ExternalKmsProvider	Marker SPI for external cloud or enterprise KMS integrations.
ExternalPdpAuthorizationPolicy	Authorization policy adapter backed by an external PDP client.
ExternalPdpClient	Thread-safe external policy decision point client SPI.
FipsModePolicy	FIPS posture policy.
FourEyesApproval	Four-eyes approval metadata for dangerous operations.
FourEyesApprovalPolicy	Authorization wrapper requiring two-person approval for selected actions.
InMemoryAuditSink	Bounded in-memory audit sink.
InMemoryBootstrapEndpointResolver	Thread-safe in-memory bootstrap endpoint resolver for tests and embedded demos.
InMemoryMulticastBus	Deterministic in-memory multicast adapter for tests and demos.
InMemorySchedulerOptions	Immutable options for InMemoryWorkloadScheduler.
InMemoryWorkloadScheduler	Bounded in-memory scheduler used as the Phase 4 baseline implementation.
JitPrivilegeHook	Just-in-time privilege hook.
KeyManagementProvider	Thread-safe KMS/HSM provider SPI.
KeyReference	Safe reference to key material managed outside J7M.
KeyRotationPolicy	Key rotation policy metadata.
KeyUsagePolicy	Allowed usage policy for one external key reference.
MiddlewareRuntimeBuilder	Builder for Phase 1 runtime instances.
MulticastBus	Internal multicast transport adapter for registry discovery.
MulticastBusDiagnostics	Immutable multicast adapter diagnostics.
MulticastMessageEnvelope	Immutable multicast message envelope.
MulticastMessageType	Multicast message envelope type.
MulticastProtocolCodec	Versioned binary codec for multicast registry protocol packets.
MulticastProtocolMessage	Immutable multicast protocol packet payload.
MulticastQueryType	Phase 2 multicast registry query types.
MulticastRegistryBus	Compatibility alias for the deterministic in-memory multicast adapter.
MulticastRegistryClient	Decentralized multicast-style registry client.
MulticastRegistryOptions	Immutable multicast registry options.
MutableCredentialProvider	Mutable credential provider for tests and demos.
NetworkBootstrapEndpointResolver	Explicit, thread-safe lazy resolver for bootstrap+tls://host:port endpoints.
NoopAuditSink	Audit sink that intentionally drops all events.
NoopEnterpriseIntegrations	Non-networked enterprise integration fixtures.
NuggetAdminConfiguration	Runtime configuration for the headless nugget PIN admission, introspection, and discovery service.
NuggetAdminConfiguration.Builder	Mutable builder for NuggetAdminConfiguration.
NuggetAdminController	Headless per-JVM nugget administration admission service.
NuggetAdminRuntime	Runtime assembly facade for the headless nugget administration service.
NuggetAdminRuntimeConfiguration	Supported runtime assembly configuration for headless nugget PIN admission, read-only introspection, and local/configured discovery.
NuggetAdminRuntimeConfiguration.Builder	Mutable builder for NuggetAdminRuntimeConfiguration.
OidcJwtPrincipalResolver	Deterministic OIDC/JWT metadata resolver.
OperationalResilienceEvidence	Operational resilience evidence metadata.
Pkcs11ProviderAdapter	Marker SPI for PKCS#11-backed HSM adapters.
RegistryRecordTrust	Shared registry-record trust admission logic for first-party registry receivers.
RegistryRecordTrust.ReplayEntry	Replay cache entry for registry record admission.
ReleaseAttestationMetadata	Safe supply-chain and release attestation metadata.
ReleaseAttestationVerifier	Thread-safe release attestation verifier SPI.
ReleaseVerificationResult	Result of release attestation verification.
RuleBasedAuthorizationPolicy	Simple role/action/resource authorization policy.
RuleBasedAuthorizationPolicy.Rule	Immutable allow rule.
RuntimeAdmin	Minimal read-only admin facade for Phase 1 runtimes.
RuntimeEvidenceCollector	Collects runtime, security, release, crypto, and resilience evidence.
SamlPrincipalResolver	SAML principal resolver extension point.
ScimGroupSyncProvider	SCIM group synchronization extension point.
SecureConfigurationValidator	Validates production secure-configuration posture.
SecurityDefaults	Factory methods for default security configuration.
SpiffeIdentityMapper	SPIFFE/SPIRE workload identity mapping extension point.
StableHashShardRoutingStrategy	Stable hash routing strategy for Phase 4 shard metadata.
TamperEvidentAuditRecord	One hash-chain audit record.
TamperEvidentAuditSink	Bounded in-memory tamper-evident audit sink.
TestEnvelopeEncryptionService	Deterministic reversible envelope encryption fixture for tests and demos.
TestKeyManagementProvider	Deterministic KMS provider for tests and demos.
UdpMulticastBus	UDP multicast adapter for registry discovery.
ValidationSummary	Safe summary of validation commands and test outcomes.
WorkloadAdmin	Minimal admin/status formatter for workload scheduler state.
WorkloadMetricsSnapshot	Immutable workload scheduler metrics snapshot.
WormAuditSink	Extension point for file, WORM, or external immutable audit storage.