session_security.go RawHistoryFolder

1package ports
2
3// LockGeneration identifies a session transition. Zero is the initial unlocked epoch.
4type LockGeneration uint64
5
6// SecurityState is one coherent admission epoch. Generation changes on both
7// acquisition and release so queued work cannot cross a lock transition.
8type SecurityState struct {
9	Generation LockGeneration
10	Protected  bool
11}
12
13// SessionSecurity exposes the defensive gate to off-display boundaries.
14// The display goroutine remains the sole authority for protocol admission.
15type SessionSecurity interface {
16	Snapshot() SecurityState
17}
18
19// SessionSecurityController is owned by the display goroutine. Releasing
20// protection requires its exact acquisition generation; crashes do not release.
21type SessionSecurityController interface {
22	SessionSecurity
23	Engage() (SecurityState, error)
24	Release(expected LockGeneration) (SecurityState, error)
25}