Coverage for node / src / stigmem_node / federation / dnssec / __init__.py: 100%

1"""DNSSEC-rooted origin key trust — Federation Phase 3 validation core. 

2 

3This package implements the in-process DNSSEC binding-record substrate for the 

4Phase-3 first-trust ladder (frozen design Rev 6). It is **off-path and 

5default-inert**: nothing here is reachable from the relay resolver until the 

63b ladder wiring lands behind ``federation_dnssec_trust_enabled`` (default 

7False). 

8 

9Lazy-import invariant (Rev 6 I11): there is **no top-level ``import dns``** 

10anywhere in this package. dnspython is supplied by the optional 

11``[federation-dnssec]`` extra and is imported only inside the functions that 

12need it, so importing ``stigmem_node`` on a default node never loads the extra. 

13""" 

14 

15from __future__ import annotations 

16 

17from .host import host_from_entity_uri 

18from .resolve import DnssecResult, resolve_dnssec_binding 

19 

20__all__ = [ 

21 "DnssecResult", 

22 "host_from_entity_uri", 

23 "resolve_dnssec_binding", 

24]