# apple_kit

This is the README for `apple_kit` which contains `RadrootsKit`, the shared
Swift package for native Rad Roots Apple-platform application services.

## Verification

Run `tools/verify-boundaries.sh`, `tools/verify-supply-chain.sh`,
`bash tools/swift-package.sh build`, and `bash tools/swift-package.sh test`
from a standalone clone. The package launcher runs SwiftPM with the exact
resolved dependency and uses `SWIFTPM_SCRATCH` and `SWIFTPM_CACHE` when supplied.
An ordinary clone uses its local `.build` scratch directory.
The boundary command byte-compares
the normalized public symbol inventory against its reviewed API baseline and
rejects forbidden repository roots or credential material. In an
extbuild-enabled checkout, first run
`cargo extbuild doctor` and route those commands through
`cargo extbuild run --`.

## Storage capacity

File, capture and transfer adapters report typed capacity failures without raw
filesystem details. A failed write may already have installed bytes; retain the
original identity and reconcile before retrying. The transfer receipt envelope
has a separate bounded-capacity error. Neither error authorizes deletion of
unresolved receipts, staged media or leases, or automatic network retry.

## Identity custody

User-presence cancellation and timeout invalidate the active authentication
context. Cancellation before evaluation prevents its launch. Legacy identity
migration removes the legacy secret only after reading and validating the
retained active key against the same public identity. An unavailable or invalid
active key preserves legacy custody for explicit recovery.
Hosts with retained public metadata can supply its expected public key to the
guarded migration overload; a mismatch fails before import or legacy deletion.
Cancelled custody requests cannot use a later successful presence callback to
authorize another effect. Cancellation does not roll back an already committed key.

## Copyright

Except as otherwise noted, all files in the `apple_kit` distribution are

    Copyright (c) 2026 Tyson Lupul

## License

This repository is licensed under GPL-3.0-or-later. See LICENSE.