All Classes and Interfaces
Class
Description
Action performed on an attribute for access governance.
Context used for attribute ACL checks and audit correlation.
Decision outcome of an access control check.
Validated active profile resolution result used by end-entity issuance.
DER encoding helpers for X.509 2019 Amendment 2 alternative-signature extensions.
Optional extension for signing providers capable of performing a direct
synchronous alternative signature without the full signing infrastructure.
Append-only UTF-8 line store with best-effort POSIX permissions.
Generic asynchronous operation bus.
ServiceLoader provider for the PKI asynchronous operation bus.
Target endpoint that owns/executes operations and can be asked for their
status.
Event delivered to registered handlers whenever an operation status changes.
Callback handler for async operation events.
Immutable snapshot of an operation's identity and routing metadata.
Registration handle for a handler subscription.
Lifecycle state of an asynchronous operation.
Non-sensitive status snapshot of an asynchronous operation.
Policy decision point for attribute-level access control.
Governance hints controlling auditing and exportability of an attribute.
Registry/catalogue of attribute definitions.
Typed and governed attribute definition used across credential frameworks.
Named export targets used by governance and publication pipelines.
Policy enforcement point for attribute access with mandatory auditing.
Stable attribute identifier used by the attribute catalogue.
Structured, human-facing documentation metadata for an attribute definition.
Data sensitivity classification for an attribute.
Immutable set of typed attributes.
Lifecycle maturity of an attribute definition.
Typed attribute value.
Boolean value.
Byte string value.
Instant value.
Integer/long value.
String value.
Declares the logical value type of an attribute.
Immutable anchor describing the tamper-evident head of an append-only audit
log: the highest assigned record sequence and the record hash that closes the
hash chain at that point.
Auditable event emitted by the PKI core and governance layer.
Closeable append-ordered feed over one family's co-committed success-evidence log.
One append entry.
Safe result of verifying the tamper-evident hash chain over an append-only
audit log.
Closed classification of an audit integrity verification.
Verifies the tamper-evidence of a hash-chained audit log.
Query constraints for searching audit events.
Records and queries audit events for PKI operations and attribute governance.
SPI for persisting audit events.
ServiceLoader provider for
AuditSink implementations.Opaque backup artifact produced by
BackupService.Resource limits for the version-1 backup envelope.
Verified, close-owned staging for a future cold activation coordinator.
Requests creation of a PKI backup.
Backup/restore operations for PKI state.
Bounded file-backed ingestion.
Repeatable file-backed backup input with an explicit owner.
Verification results for a backup artifact.
Edge adapter between the provider-neutral X.509 binding authority and the
ZeroEcho PKIX library's
AlgorithmIdentifier value type.Internal attribute identifiers used by the Bouncy Castle backed X.509 PKI
framework adapter.
Parser for X.509 PKCS#10 certification requests, routed through the ZeroEcho
PKIX library.
Bouncy Castle backed X.509 implementation of
CredentialFramework.ServiceLoader provider for the Bouncy Castle backed X.509 credential
framework.
Minimal framework attribute mapper for the internal Bouncy Castle backed
X.509 adapter.
Exact X.509 representation and postcondition helpers for validated leaf
profiles, expressed in terms of the ZeroEcho PKIX library and standard JDK
certificate accessors.
Immutable proof verifier for exact PKCS#10 and signing-key CRMF requests.
Adapter for binding-owned
SubjectPublicKeyInfo encodings, expressed
entirely in terms of canonical DER byte arrays and the ZeroEcho PKIX library.Closed extraction boundary for original X.509 enrollment transport attributes.
Edge inspection of a canonically validated signed X.509 object.
Exact role-specific identities extracted from validated original DER.
Stateless verification executor at the X.509 adapter edge.
Loader for the fixed built-in certificate-profile resource catalogue.
Immutable built-in certificate-profile provisioning template.
Command to build a distributable bundle for an existing credential.
Immutable issuer-controlled CA certificate policy.
Command to create a new root CA entity and issue its initial CA credential.
Command to import an existing root CA credential into PKI inventory.
Command to rotate a CA key reference and issue new corresponding CA
credentials.
Intermediate rotation with a new managed key.
Root rotation with an explicitly provisioned new key.
Closed X.509 key-usage set available to CA certificate profiles.
Classifies CA entity type.
Exact versioned CA profile identity for a root or intermediate credential.
Query constraints for listing CA entities.
Represents one logical CA authority and its explicit issuer generations.
Command to roll over a CA credential while keeping the same key reference.
Intermediate rollover with an expected current subject key.
Root rollover using the authoritative current key.
Manages Certificate Authority (CA) entities and their lifecycle.
Pure, domain-separated commitment to an intermediate CA signing intent.
Operational state of a CA entity.
Exact immutable binding between an internal proof and its parent CA/TBS intent.
Closed certificate-specific policy variant.
Defines issuance constraints and mapping hints for a class of credentials.
Immutable, versioned certificate-profile configuration.
Strict JSON parser and canonical writer for version 4 certificate-profile
documents.
Closed certificate category governed by a profile definition.
Exact immutable identity of one imported certificate-profile version.
Opaque certification request container.
Parses and normalizes framework-specific certification requests into the core
request model.
Processes certification requests (CSR-like objects) into a normalized
representation.
Fan-out
AuditSink that delivers each event to an ordered list of
delegate sinks.ServiceLoader provider for configurable implementations.
Closed credential-disclosure policies with stable persistence-independent codes.
Immutable portable proof-suite coordinates frozen into a confirmation challenge.
Immutable reference to one exact credential-confirmation proof-suite profile.
Portable canonical identity of the realm bound into a credential-confirmation challenge.
Atomic sequential sink for staged operation content.
Immutable, thread-safe exact issuance input and its frozen orchestration intent.
Immutable, thread-safe correlated renewal input.
Immutable correlated replacement input.
Pure identity derivation shared by issuance lookup and domain preparation.
Closed result of correlated end-entity preparation.
Immutable snapshot of exactly matching retained work, including failed,
cancelled or expired work.
Immutable carrier of one unused preparation.
Issued credential with mandatory core metadata and universal attributes.
Bundle of a primary credential and supporting objects.
Immutable portable challenge record for one pending credential confirmation.
Immutable transient command for issuing one credential-confirmation challenge.
Immutable frozen inputs for the initial credential-confirmation lifecycle record.
Immutable committed credential-confirmation lifecycle record.
Derived closed lifecycle states.
Derived confirmation timeliness classifications.
Immutable issuance-profile policy for credential confirmation.
Exact public audience of credential-confirmation proof transcripts.
Immutable compare-and-set input binding completion to one pending lifecycle and challenge.
Immutable safe presentation of one issued credential-confirmation proof challenge.
Minimal caller expectation for issuing a credential-confirmation proof challenge.
Closed data-free result of one credential-confirmation proof submission.
Immutable server-controlled runtime policy for credential key-possession challenges.
Immutable bounded submission of one key-possession proof response.
Reduced immutable administrative view of one pending credential confirmation.
Opaque store-issued exclusive cursor for pending confirmation reviews.
Immutable bounded page of reduced pending-confirmation reviews.
Session-owned application facade for authoritative credential confirmation.
Pluggable credential framework implementation.
Service provider for
CredentialFramework instances.Inventory and reporting service for issued credentials.
SPI contract for framework-specific credential issuance backends.
Durable, auditable supersession lineage between a superseding credential and
the predecessor it replaces.
Closed immutable identity of the policy governing an issued credential.
Query constraints for searching credentials in inventory.
Immutable filters for indexed credential inventory search.
Status of a credential as tracked by PKI inventory.
Closed categories of currently reachable credential trust decisions.
Immutable structured input for one certificate-revocation-list entry.
Stable restartable source of CRL entries.
One-pass entry cursor.
Immutable internal identity of an X.509 CRL issuer: canonical X.500 name and
exact canonical DER SubjectPublicKeyInfo.
Immutable Merkle-chained entry in the CT audit journal.
Checked exception thrown by
CtJournalStore operations.Append-only, Merkle-chained CT audit journal.
Result of a
CtJournalStore.verify(long, long) integrity check.Describes a Certificate Transparency log endpoint used for Mode B SCT collection.
Server-layer live counters injected into dashboard metric computation.
Immutable measurement without exception or provider details.
Availability of one independently collected measurement.
Default enforcement implementation of
AttributeGovernanceService.Default implementation of
CertificationRequestService.Default store-backed confirmation facade with session lifecycle enforcement.
Opaque semantic view over the existing signing preparation's sole custody state.
Module-private implementation of the externally opaque prepared carrier.
Store-backed implementation of the certificate-profile lifecycle.
Durable explicit post-commit publication lifecycle.
Store-backed authoritative revocation transition service.
Stateless, thread-safe semantic facade over the session's signing service.
Stateless thread-safe implementation over the authoritative signing store.
Reactor-owned acceptance operation and custody-transfer boundary.
Borrowed wait callback implemented by the service's existing reactor.
Frozen, resource-free identity of the validated full CRL used by a delta.
Requests a delta X.509 CRL for an explicit issuer generation.
Immutable deployment-owned resource policy for streaming PKI operations.
Strict bounded encoding of the closed public attribute-value hierarchy.
Strict length-framed encoding for frozen outer-operation command fields.
Immutable decoded command.
Domain-owned durable continuation paired with one signing operation.
Domain operation reconstructed after signing completes.
Complete versioned durable outer continuation.
Durable outer lifecycle.
Immutable bounded domain input attached atomically to a signing intent.
Central fail-closed validation for recovered durable domain continuations.
Exact bounded inputs for one signing operation with durable domain ownership.
Generic durable implementation of
AsyncBus.Typed immutable identity of a durable business owner of staged content.
Closed durable-owner categories reserved by the Phase A lifecycle.
Stable, payload-free reference to immutable staged content.
Durable ownership classification.
Durable exclusive-writer implementation of the transactional metadata-store SPI.
Runtime status used when deciding whether a credential may participate in a
security-sensitive operation.
Resolves authoritative runtime credential status for trust decisions.
One immutable-time effective-status evaluation.
Immutable container for an encoded artifact.
Specifies the encoding of a binary artifact payload.
Immutable input for end-entity issuance from an explicitly typed X.509 request.
Exact imported and activated profile identity for an end-entity credential.
Immutable, thread-safe reissue input.
Immutable, thread-safe renewal input.
Immutable, thread-safe replacement input with a fresh, explicitly typed request.
Session-owned leaf TBS construction and staging boundary.
Opaque export artifact containing exported objects.
Controls export representation.
Query constraints for exporting credentials and revocations.
Validated exact X.509 extended-key-usage object identifier.
Persistent
AuditSink provider storing audit events as daily gzip
files.AuditSinkProvider for the file-backed audit sink.Default async bus provider: in-memory state with append-only file
persistence.
Filesystem-based reference implementation of
PkiStore.Immutable local signing-index capacity counters.
Immutable operational counters for the shared local-signing WAL writer.
PkiStoreProvider for the filesystem-backed PkiStore.Explicit filesystem publication-destination provider.
Filesystem-backed staged-content store with atomic completion and streaming
integrity verification.
Identifier of a credential framework/format handled by the PKI core.
Maps universal attributes to framework-specific constructs and optionally
back.
Filesystem-backed implementation of
CtJournalStore.Factory that opens or creates a
FsCtJournalStore at a given filesystem path.History configuration for mutable entities stored by
FilesystemPkiStore.Supported cleanup strategy.
Options for
FilesystemPkiStore.Explicit resource settings for the derived embedded H2 search index.
Immutable request to prepare a full X.509 CRL for one explicitly selected
issuer generation.
Internal durable full-CRL schema shared by preparation, publication and recovery.
Stateless session-owned composition of full-CRL policy validation and TBS staging.
Bounded immutable revocation provenance shared by full-CRL publication and validation.
HTTPS publication destination provider.
Mutually-authenticated HTTPS/JSON binding of
RemoteSigningTransport.Discriminates the hybrid certificate mode for a certificate profile.
X.509 2019 Amendment 2 alternative-signature extension mode.
Composite-signature mode per draft-ounsworth-pq-composite-sigs (stub; not yet implemented).
No hybrid mode — the certificate carries only a primary signature.
Twin-certificate mode: two parallel CA hierarchies, one classical and one
post-quantum, are maintained and cross-referenced at the deployment level.
String codec for stable persistence of identifiers.
Package-owned immutable registry implementation used by session bootstrap.
Immutable persisted profile version and its canonical configuration bytes.
Import and export operations for migration and interoperability.
Policy flags controlling import behavior.
In-memory
AuditSink provider intended for deterministic tests and
local debugging.AuditSinkProvider for the in-memory audit sink.Command to issue a new CA credential for an existing intermediate CA entity.
Command to create a new intermediate CA entity and issue its initial CA
credential.
Configuration-independent provenance for intermediate creation, additional
issuance and rollover.
Session-owned intermediate creation, issuance and lifecycle validation and single-candidate staging.
Closed multi-party approval requirement a certificate profile places on
end-entity issuance.
Immutable, server-derived evidence co-committed with a successful end-entity issuance.
Stable evidence actor classifications.
Stable evidence authentication classifications.
Stable evidence authorization classifications.
Exact administrative or enrollment authorization path; administrative break-glass takes precedence.
Outcome committed atomically with the credential.
Normalized inputs for issuance policy evaluation.
Durable idempotency and frozen-selection authority for one issuance request.
Issues, renews, replaces, and reissues credentials, and builds distributable
bundles.
Command to issue an end-entity credential from a parsed certification
request.
Immutable explicitly ordered issuer chain from selected issuer certificate to
its trust-anchor certificate.
Immutable authority record for one concrete CA issuer generation.
Durable lifecycle state of one concrete CA issuer generation.
References the exact issuer generation that produced a credential.
Immutable authoritative persisted context for stateless key-possession challenge work.
Request-local authoritative credential input for key-possession proof validation.
Immutable portable descriptor and public input bounds of one proof-suite configuration.
Immutable bounded canonical challenge presentation produced by a proof provider.
Trusted, request-stateless provider for one key-possession proof suite.
Immutable globally bounded client response to a key-possession challenge.
Closed result of one stateless key-possession proof verification.
Opaque reference to private key material.
Complete issuer-controlled leaf certificate extension and identity policy.
Closed X.509 key-usage bit set available to leaf certificate profiles.
Immutable standalone configuration with an explicitly declared trusted local operator.
Immutable bounded caller-thread signing configuration without a reactor topology.
Session-borrowed synchronous local signing.
Immutable local result; durable acceptance alone is never successful completion.
Completed outer domain operation.
Explicit safe failure; absent receipt does not imply absence of mutation.
Configuration-independent immutable proof bindings shared by admission,
observation and recovery.
Strict version-two, big-endian managed-key proof challenge codec.
Acyclic immutable context of an internal CA proof challenge.
Exact immutable decoded challenge, with defensive byte-array copies.
Frozen managed-key proof authorization prefix.
Internal managed-key proof preparation owned by the session semantic service.
Closed purposes of managed private-key possession proofs.
Immutable, thread-safe coordinates for a managed private-key possession proof.
Proof coordinates for a CA subject key.
Proof coordinates for a managed OCSP responder key.
Immutable, thread-safe purpose-specific coordinates of a managed key proof.
Immutable immediate or resolved metadata-transaction result.
Stable non-sensitive metadata failure categories.
Closed commit-outcome model.
A closeable, snapshot-consistent streaming metadata cursor.
Immutable provider-neutral identity of one metadata record.
An immutable, store-issued view of one committed metadata revision.
Stable content-integrity metadata without payload or storage details.
An ordered range within one semantic namespace.
A repeatable record view owned by a snapshot.
Immutable adapter capability declaration.
Accepted repeatable-content length forms.
Optional facilities that do not weaken required store semantics.
Authoritative transaction-outcome retention model.
Adapter writer-concurrency model.
Checked metadata-store failure carrying a stable, non-sensitive category.
Stable provider-neutral metadata-store identity.
A single-use, store-issued metadata transaction.
Canonical durable transaction identity issued by one metadata store.
Builds a mutually-authenticated
SSLContext for the remote signing
transport from a PKCS#12 client-identity keystore and a PKCS#12 trust store
pinning the remote service's issuer.Transport-neutral strict OCSP response generation through session-owned signing.
One strictly parsed CertID.
Supported RFC CertID digest identities.
Exact already-authorized responder generation command.
Exact responder identifier representation.
Signed canonical response and stable revocation provenance.
Content-free result indicating that the bounded initial signing attempt
returned pending.
Internal mapper from X.509 and PKCS#10 signature algorithm identifiers to
ZeroEcho canonical signature algorithm ids.
Durability policy for workflow continuation data managed by orchestrators.
Normalized representation of a certification request.
PKCS#11 / HSM signing provider.
ServiceLoader factory for the PKCS#11 / HSM signing provider.
Minimal bootstrap entry point for the
pki module.PKI-specific async bus type aliases.
Endpoint identifier type for PKI asynchronous operations.
Operation identifier type for PKI asynchronous operations.
Owner type for PKI asynchronous operations.
Result type for PKI asynchronous operations.
PKI bootstrap utilities for ServiceLoader-based components.
Exact process-local provider allocation and selected factory contribution.
PKI-specific codecs used to instantiate the generic async bus.
Read-only runtime configuration metadata; implementations expose no provider options or key material.
Immutable safe configuration metadata and a bounded key page.
Base runtime exception for PKI domain failures.
Immutable, non-sensitive description of a PKI failure.
Stable, protocol-independent classification of a PKI failure.
Closed set of stable, non-sensitive PKI failure codes.
PKI exception carrying a stable, non-sensitive failure description.
Closed set of stable, typed machine reason codes for internal PKI operation
failures.
Opaque identifier for PKI-managed entities.
Utility methods for generating and validating
PkiId values.Closed set of synchronous non-signing PKI operations.
Activates one imported profile version.
Completes one credential confirmation proof.
Places one committed credential on temporary hold using the authoritative clock.
Imports one certification request.
Inspects one active X.509 algorithm binding.
Inspects the metadata of one stored authority through an authoritative point lookup.
Inspects the metadata of one stored credential through an authoritative point lookup.
Inspects the metadata of one stored issuer chain path through an authoritative point lookup.
Inspects the metadata of one stored issuer generation through an authoritative point lookup.
Inspects one exact profile version.
Inspects one publication operation.
Inspects one stored certification request.
Inspects the current revocation state.
Inspects the metadata of one stored status object through an authoritative point lookup.
Inspects the generation schedule for one CA status family.
Issues or replays the proof challenge for one pending confirmation.
Lists active X.509 algorithm bindings.
Lists the first authorities in authoritative store order.
Lists all chain paths for one issuer generation in authoritative store order.
Lists all historical issuer generations of one authority, ordered by identifier.
Lists pending credential-confirmation reviews in one authorized scope.
Lists logical profile identifiers in ascending identifier order without subject data.
Lists imported versions of one profile.
Lists publication operations.
Lists stored requests in ascending identifier order without subject or key material.
Lists the first status objects for one issuer in authoritative store order.
Lists all configured generation schedules.
Processes one pending publication.
Queries authority-inventory metrics for one CA: issuer-generation states,
chain depth, and CA lifecycle state.
Queries certificate-lifecycle metrics for one CA: active, expiring, and revoked counts.
Queries publication-health metrics for one CA: pending and failing publication counts.
Queries revocation and CRL freshness metrics for one CA.
Queries server-health and enrollment metrics: JVM heap, approval queue depth,
admin request totals, and audit-projection failure counts.
Reads a bounded prefix of one revocation history.
Reconciles one publication with an unknown external outcome.
Registers a chain path by prepending a member generation's credential to a parent path.
Registers one profile document.
Registers post-commit publication of one authoritative object.
Retries one eligible publication.
Permanently revokes one committed credential.
Permanently revokes one still-pending non-public credential.
Searches credentials issued by one authoritative authority with optional filters.
Selects an active issuer generation and matching chain path owned by one authority.
Creates or replaces the automatic generation schedule for one CA status family.
Reads a bounded current-revocation snapshot.
Changes one authority's operational state without changing its generation selection.
Releases an existing temporary hold using the authoritative clock.
Validates the active binding registry and optionally one exact binding.
Validates the opened session configuration.
Validates one profile document without storing it.
Verifies proof of possession for one stored request.
Synchronous transport-neutral executor for the closed PKI operation model.
Stable safe classifications for synchronous PKI operation failures.
Closed completed, durable-pending, or safe-failure outcome returned by the operation executor.
Successful operation outcome.
Safely classified operation failure without a throwable graph.
Durable operation that yielded without retaining its caller thread.
Finite structured result of one successful typed PKI operation.
Closed transport-neutral value model used by safe operation results and plan
arguments.
Boolean scalar.
Signed 64-bit integer scalar.
Immutable ordered list value.
Deterministically ordered object value.
Text scalar.
Read-only authoritative repository facade owned by one
PkiSession.Lifecycle-owned immutable repository content lease without store internals.
Closed semantic role of public repository content.
Read-only transport-neutral resolver for authorization scope cross-checks.
Exact authorization coordinates frozen into one committed credential.
Authorization-aware selection execution; the predicate is invoked synchronously and never retained.
Lifecycle-owned synchronous PKI backend session.
Immutable configuration for one PKI backend session.
Activation and OID namespace authorization for an installed binding provider.
Provider, domain and explicit bounded runtime values for reactive signing.
Shared finite coordinator and provider-call bounds for a P1c signing
topology.
One exact-key routing group and its dedicated lane pool.
Finite execution and prefetch capacity owned by one signing route.
Immutable P1c signing topology with disjoint exact-key groups and one
mandatory catch-all lane pool.
Immutable process-local capabilities for one PKI session composition.
Shared semantic command preparation and safe completed-result projection.
Immutable closed signing-command inputs shared by server and local execution.
Creates one root certificate authority using an existing managed key reference.
Creates one intermediate certificate authority and its initial CA credential.
Generates one signed status object from a stable revocation view.
Issues one end-entity credential from an already imported request.
Issues a new CA credential for an existing intermediate authority (cross-sign or renewal).
Reissues one end-entity credential from its stored issuance record and supersedes the predecessor.
Renews one end-entity credential, keeping its subject and key under a fresh validity.
Replaces one end-entity credential from a new imported request and supersedes the predecessor.
Rolls over one CA credential, keeping the same key and advancing the current issuance generation.
Rotates one CA key and issues a new corresponding generation, advancing the current issuance pointers.
Persistence boundary for PKI state.
Safe immutable request-selection metadata; contains no subject, SAN, CSR or key bytes.
ServiceLoader provider for PkiStore
implementations.Immutable process-local runtime dependencies supplied when opening a PKI store.
Policy decision including optional modifications to be applied to an
operation.
Outcome status of a policy evaluation.
Policy evaluation and explainability.
Explainability trace for a policy decision.
Single evaluation step within a policy trace.
Provider-free, resource-free evidence for one fully staged full CRL TBS.
Opaque single-use semantic preparation with exclusive staged-content custody.
Opaque prepared request whose staged candidate remains caller-owned.
Identifies an actor performing an operation or requesting access.
Internal typed classification for redacted profile lifecycle failures.
Closed profile lifecycle failure codes.
Query constraints for listing profiles.
Versioned certificate-profile import, activation, and lookup service.
Closed set of stable, machine-readable proof-of-possession (PoP) verification
reason codes.
Result of proof-of-possession (PoP) verification.
Outcome of proof-of-possession (PoP) verification.
Verifies proof-of-possession (PoP) for a parsed request in a
framework-specific manner.
Backend configuration for
ConfigurableProvider instances.Immutable non-secret identity and content commitment for one external attempt.
Closeable snapshot-consistent cursor over publication records.
Identifies how an exact attempt outcome was established.
Immutable, server-derived evidence for the terminal outcome of one publication operation.
Terminal publication outcomes.
Safe closed classifications for publication-operation failures.
Definitive outcomes a publisher may safely return for one exact attempt.
Query constraints for listing publication records.
Persisted current state of one publication operation.
Immutable request to register distribution of one already committed PKI object.
Result of a publish operation.
Publication and distribution operations.
Identifies the authoritative PKI object supplying publication content.
Durable publication-operation state.
Describes where and how to publish an artifact.
Classifies the publication destination type.
Functional contract for resolving public key information for a
KeyRef.Resolves exportable public-key information from the same managed-key authority
used by a signing provider.
Publishes an encoded artifact to a configured publication target.
Service-provider contract for explicitly configured publication destinations.
Resolves secret references in publisher provider configurations.
Encryption protection profile for the publisher secrets store.
Encrypted publisher secrets store.
Declares the purpose of an operation/access for governance and auditing.
Command to reissue based on a stored issuance record.
Stateless signing provider backed by an externally idempotent remote service.
Service-loadable factory that binds the PKI to a remote signing service
through
SigningProvider.Technology-neutral wire seam between the PKI's remote signing provider
provider and a remote signing service.
Per-call deadline and cooperative cancellation.
Remote service capabilities.
Best-effort remote status-change callback.
Signals that a remote signing call did not complete with a definite,
trustworthy outcome.
Technology-neutral state a remote signing service reports.
The remote operation's current status.
One signing request on the wire.
Command to renew an existing credential.
Command to replace an existing credential.
Query constraints for searching stored certification requests.
Controls whether and when parsed certification requests are persisted for
correlation and audit.
Explicit deployment-owned resource constraint.
Positive finite deployment-owned limit.
Stable non-sensitive failure for deployment resource rejection.
Explicit absence of a deployment-owned limit.
Authoritative identity and outcome of the latest cold restore.
Definitive rejection before a restore publishes activation intent.
Result report for a restore operation.
Requests restore of PKI state from a backup artifact.
Immutable local restore outcome.
Observable restore outcomes.
Optional persistence codec for results.
Immutable CSR-free coordinates for exact lookup of retained issuance semantics.
Closed, immutable commands accepted by the revocation state machine.
Places a credential on hold.
Permanently revokes a credential.
Removes an existing hold.
Narrow application seam for revocations that require authoritative evidence.
Immutable, server-derived evidence co-committed with a revocation transition.
Stable evidence actor classifications.
Stable evidence authentication classifications.
Stable evidence authorization classifications.
Administrative authorization path, with break-glass taking precedence.
Outcome committed atomically with the transition.
Closeable one-pass history of one credential in credential-local revision order.
Normalized inputs for revocation policy evaluation.
Query constraints for searching revocation records.
Revocation reason codes with PKIX-compatible semantics.
Immutable current revocation state for one credential.
Authoritative revocation transition, current-state, and history administration.
Stable, restartable ordered current-state view at one authoritative revision.
One-pass current-state cursor.
Effective state recorded by the authoritative global revocation log.
One committed transition in the authoritative global revocation log.
Closeable append-ordered feed over one immutable captured revocation-log head.
One authenticated append entry.
Immutable source head captured when the feed was opened.
Provider-defined opaque exclusive resume position.
Stable direct-lookup view of one authoritative revocation log revision.
Validates and stages one self-issued root TBS using borrowed session dependencies.
Finite domain namespaces for authoritative semantic signing correlation.
Immutable authoritative semantic observation.
Immutable persisted coordinates for a caller's authorization cross-check.
Privileged, thread-safe lifecycle boundary for durably signed domain operations.
Authoritative outer lifecycle, independent of the signature lifecycle.
Read-only gate-produced signed status completion.
Finite durable signing-acceptance disposition.
Immutable redacted receipt for resolving a possibly uncertain acceptance.
Authoritative resolution of a possibly uncertain acceptance.
Result of one durable acceptance attempt.
Immutable, server-derived evidence for the terminal outcome of one signing operation (CA private-key
usage).
Terminal signing outcomes.
Stable typed failure raised by the bounded signing execution runtime.
Small Increment 11 execution failure taxonomy.
Immutable, thread-safe input contract for a configured signing provider.
Meaning of the transmitted signing input.
Immutable authoritative signing-operation snapshot.
Public signing lifecycle projection.
Idempotent local CA-proof verification and terminal-signing publication driver.
Stateless execution boundary for one configured signing provider.
Per-invocation deadline and cooperative cancellation.
Finite non-sensitive reasons accepted by provider cancellation.
Immutable 256-bit commitment to effective provider configuration.
Exact commitment to candidate bytes consumed by the provider.
Finite safe detail codes; raw provider reasons never cross this boundary.
Finite, non-sensitive provider observation taxonomy.
Bounded observation returned directly by one provider call.
Exact immutable request for an already durably claimed dispatch.
Bound call executor that validates authoritative store/provider identity before
every provider dispatch, reconciliation, or cancellation invocation.
ServiceLoader factory for a configured
SigningProvider.Immutable process-local capabilities and clock supplied to a signing factory.
Bounded topology-aware pull reactor over the authoritative signing backlog.
Immutable privileged input for one sign-only operation.
Privileged, session-owned application boundary for durable signing.
Executes one durable signing step on the calling thread without scheduling work.
Idempotently verifies a claimed CA proof or advances terminal outer publication.
Versioned ZeroEcho signing-submission identifier.
Authoritative durable state machine for signing submissions.
Transport-neutral immutable input consumed by one atomic acceptance.
Canonical, non-secret commitment to one complete acceptance command.
Canonical streaming encoder for the immutable acceptance commitment.
Once-written immutable signing envelope.
Authoritative resolution of a potentially uncertain acceptance commit.
Atomic durable acceptance disposition.
Unique immutable candidate identity retained through the signing identity
horizon.
Small immutable terminal provider evidence for an internal proof.
Immutable structural descriptor of a parent-owned internal CA proof step.
One lightweight reconciliation candidate.
One bounded identity-ordered page of lightweight reconciliation candidates.
Persisted budget of the bounded initial attempt, separate from cleanup retries.
Immutable execution policy selected at acceptance.
Separately replaced mutable signing state.
Immutable outer-operation input paired atomically with signing acceptance.
One bounded snapshot page ordered by canonical submission identifier.
One ordered signing-record scan result.
Durable classification for one deferred reconciliation retry.
Immutable scheduling identity used to route one signing workflow.
Both immutable scheduling coordinates reserved at acceptance.
Durable stage of a parent-owned CA subject proof or ordinary signing.
Signing orchestration states.
Read-only aggregate assembled from one immutable envelope and mutable state.
Minimal immutable
AttributeSet implementation used by PKI core
runtime services.Minimal immutable
AttributeSet implementation used by the Bouncy
Castle backed X.509 framework adapter.Mutable builder for
SimpleAttributeSet.Mutable builder for
SimpleAttributeSet.Immutable representation of one attribute entry.
Utility for selecting ServiceLoader providers by a stable identifier.
Provider id accessor used by the selector.
Reads component configuration from system properties using a prefix
convention.
Durable, runtime-owned staging boundary for signed-object content.
Immutable authoritative standard X.509 bootstrap bindings.
Immutable, server-derived evidence co-committed with a successfully generated status object (CRL,
delta CRL, or persistent OCSP response).
Outcome committed with the status object.
Generated status object used for revocation distribution.
Command to generate a new status object for an issuer CA.
Generates status objects for a credential framework (e.g., CRL/delta CRL/OCSP
for X.509).
Query constraints for listing status objects.
Status object generation and retrieval.
Identifies the kind of published status object.
Configures the automatic generation interval for one status-object family.
Borrowed session service for durable recurring status generation and recovery.
Immutable durable scheduling progress, separate from configuration revision.
Immutable claim and its current durable outcome.
Durable execution stages.
Reference
AuditSink provider writing a deterministic summary line to
standard output.AuditSinkProvider for the standard-output audit sink.Store-backed authoritative resolver for runtime credential status.
Stateless streaming signature verification shared by CRL preparation and publication.
Focused incremental canonical-DER structural validator.
Immutable complete-TLV spans within one validated unsigned certificate TBS.
Resource-free semantic projection of a structurally valid CRL.
Supported signed-object grammar.
Exact offsets into the validated original DER.
Focused canonical DER streaming primitives used by signed-object adapters.
Two-pass definite-length DER writer for a full RFC 5280 v2 TBSCertList.
Constant-size first-pass evidence, containing no entries or encoded content.
Closed immutable canonical Subject Alternative Name representation.
Canonical DNS A-label name.
Canonical raw IPv4 or IPv6 address.
Canonical ASCII RFC 822 mailbox.
Canonical ASCII hierarchical absolute URI.
Deny-by-default Subject Alternative Name policy.
Occurrence and IP-family rule for one supported SAN type.
Closed set of requester-supplied Subject Alternative Name types.
Deny-by-default subject distinguished-name policy.
One ordered, single-valued, typed subject distinguished-name component.
Immutable occurrence and ownership rule for one supported subject RDN type.
Closed set of X.509 subject distinguished-name attributes supported by
end-entity certificate profiles.
Framework-agnostic subject identifier.
AuditSink that forwards audit events to a remote syslog server using
RFC 5424 framing.Syslog protocol selection.
AuditSinkProvider that creates a SyslogAuditSink.Runtime-owned file-backed uniqueness index for bounded individual values.
Provider-neutral authority for finite transactional control metadata.
Signals that an algorithm identity string could not be resolved to any known
canonical identity or approved alias.
Immutable gate-produced CA certificate request accepted by the issuer
backend.
Exact parent issuance selection and subject managed-key binding.
Closed CA certificate operations authorized by this gate.
Read-only gate-produced validated certificate request.
Immutable gate-produced end-entity certificate construction authority.
Exact issuer generation, chain path, and optional caller idempotency binding.
Read-only gate-produced validated certificate request.
Validity interval for an issued credential.
Constraints for certification request verification.
Immutable internal authority for a request that passed the issuance PoP gate.
Persisted continuation state for an orchestrated workflow.
Immutable safe descriptor of one role-specific X.509 algorithm binding.
Relying-party interoperability expectation.
Authority that owns the OID assignment.
Canonical AlgorithmIdentifier parameter representation.
Subject-public-key BIT STRING representation.
X.509 locations whose representations are independently authorized.
Signature BIT STRING representation.
Immutable explicit X.509 representation policy persisted with a certificate
profile.
Stable reference to one immutable binding contract.
Selection mode.
Installed-code provider of deployer-owned immutable X.509 bindings.
Immutable active X.509 algorithm-binding registry shared by one PKI session.
Provider-neutral canonical X.509
AlgorithmIdentifier representation.Exact parameter representation.
Provider-independent intersection of exact identity, binding, installed
execution capability, immutable security floor, configured policy, and key
compatibility.
Stable resolution failure categories.
Policy decision over exact identity data.
Resolution exception with a stable non-sensitive category.
Immutable effective selection.
Closed semantic role of an algorithm representation in X.509.
One immutable internally consistent runtime authority snapshot.
Immutable process-local executor contribution.
Deeply immutable snapshot of authoritative X.509 binding rules.
Immutable trusted-code rule between exact ZeroEcho identities and X.509
representations.
Subject-public-key bit-string representation.
Signature byte representation owned by a signature rule.
Trusted installed-code contribution of additive X.509 binding rules.
Immutable code-owned PKI defaults.
Immutable additive catalog of X.509 component identities used inside
parameterized binding rules.
Immutable component binding.
Closed component role.
Immutable, explicitly typed original X.509 enrollment request.
Closed X.509 enrollment request syntaxes.
Immutable process-local authorization to execute one resolved X.509
operation.
Non-overridable PKI algorithm security floor.
Non-forgeable live completion of one X.509 signed status-object operation.
Contextual compatibility validation for current classic X.509 suites.
Inline ZeroEcho-lib signing provider.
Production signing-provider factory bridging PKI requests to ZeroEcho lib based on
KeyringStore.Loads and locks the version-one ZeroEcho-owned private X.509 assignments.