hoplite.host

hoplite.host is the narrow trusted boundary between HAL policy and the native runtime. Application and package behavior stays in HAL; Rust implements only capabilities that require operating-system or cryptographic access.

Experimental

(random-bytes size)
(hash algorithm value)
(verify-signature algorithm public-key message signature)
(now)
(secret reference)

Every function delegates to the hoplite.host native service. A package must declare the capabilities it needs, and package configuration should contain secret references rather than secret values. The host resolves those references at execution time.

The API is intentionally storage-neutral. SQLite and PGlite support belong in separate .harp adapters implementing module contracts such as :hoplite/auth-store.

Source: lib/src/hoplite/host.hal