Crate confium_store 

Confium Store: compartmentalized key/secret persistence.

Two compartments per (module_id, app_id) pair:

• Public — distributed, identity-indexed, signed
• Private — per-device, key-id-indexed, optionally hardware-backed

Backends ship in-tree and register at link time via register_backend!:

• memory — in-process HashMap (dev / test)
• filesystem — RFC 9580 keyring files (stub, pending keyfmt)
• pkcs11, tpm, cloud-kms — future, separate plugin repos

See TODO.finalize/12-keystore-interface.md for the FFI design and TODO.roadmap/01-architecture-overview.md for the pillar context.

Re-exports

pub use backend::Compartment;

pub use backend::Options;

pub use backend::StoreBackend;

pub use backend::StoreInstance;

pub use error::Error;

pub use error::ErrorCode;

pub use error::Result;

pub use identity::Identity;

pub use keystore::Keystore;

Modules

backend

Backend trait + compile-time registration.

backends

In-tree keystore backends.

error

Error model for the Store crate.

ffi

FFI surface for the Store crate.

identity

Identity types used to index the public compartment.

keystore

Public-facing Keystore wrapper.

Macros

register_backend

Submit a backend to the link-time registry.