Explicit verified-HTTPS SimpleStreams catalog. Construction is passive;
refresh/1 returns a new immutable connection-local catalog. The host supplies
its native architecture explicitly, including any pinned platform fallback.
Catalog responses share one request deadline and aggregate byte/entry bounds. There is no socket discovery, HTTP downgrade or automatic retry. An optional host cache adapter keeps the pinned cache directory's expiry, stale fallback and invalidation without shared code writing files. An optional host delta adapter owns conversion and temporary state; installed conversion and cache storage remain separate acceptance gates.
certificate: is the pinned TLSServerCert: one public PEM certificate that
connection_info/1 reports and copies send as the source certificate. It is
empty by default, which tells a target to use system trust.
Summary
Functions
Native origin metadata without network or credential-file access; the certificate is the explicit certificate: PEM, never inferred from trust references.
Native no-op disconnect; the immutable catalog owns no pool, files or conversion worker.
Immutable HTTP handle confined to this verified origin; construction performs no I/O.
Bounded raw HTTP request on the explicit origin; redirects and mutations are never replayed.
Download selected image parts through acknowledged host sinks; verify SHA-256 and sizes.
Functions
Native origin metadata without network or credential-file access; the certificate is the explicit certificate: PEM, never inferred from trust references.
Native no-op disconnect; the immutable catalog owns no pool, files or conversion worker.
Immutable HTTP handle confined to this verified origin; construction performs no I/O.
Bounded raw HTTP request on the explicit origin; redirects and mutations are never replayed.
Download selected image parts through acknowledged host sinks; verify SHA-256 and sizes.