Expand description
Host imports callable from a sandboxed WASM plugin.
Every import is gated by Capability: the plugin must hold a
matching capability before the host side executes the real work.
A denied call traps the guest (returns an error to the host
caller of SandboxInstance::call).
The convention follows the design doc: imports are named
cfm_<interface>_<verb> and InterfaceAccess { name: "<interface>" }
gates the whole family.
NOTE: the real I/O implementations (hash, net, key) live in confium-core / confium-net / confium-store. This crate only owns the capability-gating dispatch surface; the per-import handlers are stubs for now, wired up as the host side matures.