Module rdu_sdk 

The SDK bridge kit — every plausible RDU front door behind ONE object-safe seam, so the day the vendor SDK arrives is a fill-in-the-blanks job in this file and nowhere else.

A bridge has two halves. ingest turns the certified neutral artifact (NeutralArtifact) into whatever the SDK takes (VendorConfig) and MUST forward the proof: the config is stamped with the certificate’s digest, and an artifact whose certificate does not recheck against its own program is refused before a byte leaves. certify_back takes whatever the SDK hands back (VendorPlacement — a placement of the same computation) and earns it the proof-carrying certificate through certify_external_spatial, or None, fail-closed.

MockBridge is the identity (the neutral JSON bytes in, the neutral JSON parsed back out) — it exists so the round trip, the refusals and the CLI dispatch are locked TONIGHT against a bridge that behaves. SambaFlowBridge refuses every call by name until the vendor API exists.

Structs

MockBridge

The identity bridge: the config IS the neutral JSON, and a placement is read back with parse_neutral.

SambaFlowBridge

The SambaFlow front door: a seam with the vendor API behind it still to come. Every call refuses by name.

VendorConfig

What a bridge hands the vendor: the bytes in the SDK’s format, stamped with the digest of the certificate they were proven under.

VendorPlacement

What the vendor hands back: their placement of the computation, as a neutral envelope (schema, version, lane, program — exactly what parse_neutral reads).

Enums

BridgeRefusal

Constants

BRIDGE_NAMES

Every bridge bridge_by_name dispatches to, in the order the CLI lists them.

NEUTRAL_FORMAT

The media type the mock bridge emits: the neutral artifact, byte for byte.

SAMBAFLOW_REASON

Why the SambaFlow bridge refuses today — the one string the CLI, the runbook and the lock all read.

Traits

RdaBridge

One RDU front door. Object-safe: the CLI holds a Box<dyn RdaBridge> chosen by name.

Functions

bridge_by_name

The bridge behind a name, or None for a name that is not one of BRIDGE_NAMES.

certificate_digest

The digest a config carries: the certificate’s schedule digest as sixteen lowercase hex digits.

envelope_digest

The certificate.schedule_digest a neutral envelope carries, in the same sixteen-hex-digit form.