Package zeroecho.pki.impl.core.attr

package zeroecho.pki.impl.core.attr
Internal attribute-set implementation support for PKI core runtime services.

This package contains lightweight internal implementations used to transport and assemble AttributeSet values inside the PKI core runtime. It is intended primarily for service-layer override handling, backend input assembly, and persistence-friendly internal attribute representation.

The package is part of the PKI implementation layer and is not intended to be the primary public extension surface for consumers. Public attribute contracts remain defined in zeroecho.pki.api.attr.

Design goals

  • immutability of produced attribute-set instances,
  • explicit and deterministic lookup semantics,
  • stable representation suitable for codec-based persistence,
  • minimal implementation complexity for internal runtime use.

Semantics

  • Attribute identifiers are represented by AttributeId.
  • Attribute values are represented by AttributeValue.
  • Builder-based assembly preserves insertion order of identifiers.
  • For repeated builder writes to the same identifier, the most recently written value list replaces the previous one.

Security considerations

  • Attributes carried through this package may contain operationally sensitive metadata, runtime overrides, or backend wiring inputs.
  • Implementations using this package must not assume that attribute content is safe for unrestricted logging.
  • The package provides transport and representation semantics only; validation of attribute meaning, policy admissibility, and secrecy requirements remains the responsibility of higher layers.