statecraft.
Catalog/wire-witness

013-live-loopback-capture-runtime

Live loopback capture runtime and the wire-witness executable

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Supplies the I/O shell that specs 003, 004, and 006 describe but the workspace did not contain: the wire-witness executable, a per-attempt loopback listener, a fresh in-memory CA, exact-allowlist TLS interception, an HTTP/1.1 relay that forwards verbatim and observes within bounds, redacted exchange records, and a capture manifest. It names every protocol and retention path it does not yet implement and refuses or reports them.

Read the full pinned specification ↗

Relationships

depended on by

Claimed units

  • establishes
    {
  "anchor": "live-capture-runtime",
  "file": "crates/wire-witness-proxy/src/live.rs",
  "kind": "section"
}
  • establishes
    {
  "anchor": "live-attempt-runtime",
  "file": "crates/wire-witness-cli/src/live_runtime.rs",
  "kind": "section"
}
  • establishes
    {
  "anchor": "wire-witness-executable",
  "file": "crates/wire-witness-cli/src/main.rs",
  "kind": "section"
}
  • establishes
    {
  "anchor": "live-capture-acceptance",
  "file": "crates/wire-witness-cli/tests/live_capture.rs",
  "kind": "section"
}
  • establishes
    {
  "anchor": "executable-acceptance",
  "file": "crates/wire-witness-cli/tests/executable.rs",
  "kind": "section"
}
  • extends
    {
  "nature": "additive",
  "spec": "001-boundaries-and-authority",
  "unit": {
    "anchor": "workspace.dependencies",
    "file": "Cargo.toml",
    "kind": "section"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "001-boundaries-and-authority",
  "unit": {
    "kind": "file",
    "path": "Cargo.lock"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "001-boundaries-and-authority",
  "unit": {
    "kind": "file",
    "path": "scripts/check-boundaries.sh"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "004-allowlisted-capture-proxy",
  "unit": {
    "anchor": "dependencies",
    "file": "crates/wire-witness-proxy/Cargo.toml",
    "kind": "section"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "004-allowlisted-capture-proxy",
  "unit": {
    "anchor": "live-capture-runtime-module-export",
    "file": "crates/wire-witness-proxy/src/lib.rs",
    "kind": "section"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "006-standalone-host",
  "unit": {
    "kind": "file",
    "path": "crates/wire-witness-cli/Cargo.toml"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "006-standalone-host",
  "unit": {
    "anchor": "live-runtime-module-export",
    "file": "crates/wire-witness-cli/src/lib.rs",
    "kind": "section"
  }
}
  • extends
    {
  "nature": "additive",
  "spec": "006-standalone-host",
  "unit": {
    "kind": "file",
    "path": "crates/wire-witness-cli/src/standalone_host.rs"
  }
}

Source headings

  1. 013: Live loopback capture runtime and the wire-witness executable
  2. 1. Purpose
  3. 2. Territory
  4. 3. Behavior
  5. 3.1 The executable
  6. 3.2 Attempt preparation and ephemeral trust
  7. 3.3 Listener and routing
  8. 3.4 TLS interception
  9. 3.5 HTTP/1.1 relay and bounded observation
  10. 3.6 Child environment bypass
  11. 3.7 Exchange records
  12. 3.8 Capture manifest and capture state
  13. 3.9 Provider trust
  14. 4. Observable negative cases
  15. 5. Residual risks
  16. 6. Out of scope
  17. Verification

Frozen anchors

No frozen anchors declared.