Global BSL_AbsSecBlock_AddParam (BSL_AbsSecBlock_t *self, const BSL_SecParam_t *param)

- Can be backend-only.

Global BSL_AbsSecBlock_AddResult (BSL_AbsSecBlock_t *self, const BSL_SecResult_t *out)

- Can be backend-only.

Global BSL_AbsSecBlock_AddTarget (BSL_AbsSecBlock_t *self, uint64_t target_block_id)

- Can be backend-only.

Global BSL_AbsSecBlock_Init (BSL_AbsSecBlock_t *self, int64_t sec_context_id, BSL_HostEID_t source_eid)

- Can be backend-only.

Global BSL_AbsSecBlock_Print (const BSL_AbsSecBlock_t *self)

Refactor to dump this to a pre-allocated string.

- Can be backend-only.

Global BSL_AbsSecBlock_StripResults (BSL_AbsSecBlock_t *self, uint64_t target_block_num)

- Can be backend-only.

Global BSL_Cipher_AddData (BSL_Cipher_t *cipher_ctx, BSL_Data_t plaintext, BSL_Data_t ciphertext)

Doxygen

Global BSL_Data_InitBuffer (BSL_Data_t *data, size_t bytelen)

Clarify to indicate this calls MALLOC.

Global BSL_Log_DumpAsHexString (char *dstbuf, size_t dstlen, const uint8_t *srcbuf, size_t srclen)

- Can be moved to backend.

Global BSL_SecBlockType_e

Consider making an RFC9172 header file.

Global BSL_SecCtx_ValidatePolicyActionSet (BSL_LibCtx_t *lib, const BSL_BundleRef_t *bundle, const BSL_SecurityActionSet_t *action_set)

Doxygen

Global BSL_SecOper_AppendParam (BSL_SecOper_t *self, const BSL_SecParam_t *param)

Clarify pointer/copy semantics.

Global BSL_SecOper_GetParamAt (const BSL_SecOper_t *self, size_t index)

Clarify behavior if index is out of range.

Global BSL_SecOper_IsConsistent (const BSL_SecOper_t *self)

Formalize invariants

Global BSL_SecOutcome_AppendParam (BSL_SecOutcome_t *self, const BSL_SecParam_t *param)

Double-check copy semantics.

Global BSL_SecOutcome_AppendResult (BSL_SecOutcome_t *self, const BSL_SecResult_t *sec_result)

Double-check copy semantics.

Global BSL_SecOutcome_IsInAbsSecBlock (const BSL_SecOutcome_t *self, const BSL_AbsSecBlock_t *abs_sec_block)

Can move to backend

Global BSL_SecParam_GetAsBytestr (const BSL_SecParam_t *self, BSL_Data_t *out)

Clarify whether result contains copy or view of content

Global BSL_SecParam_GetAsTextstr (const BSL_SecParam_t *self, const char **out)

Clarify whether result contains copy or view of content

Global BSL_SecParam_InternalIds

- Maybe move to SecurityContext.h

Global BSL_SecParam_IsParamIDOutput (uint64_t param_id)

Rename to avoid using negative logic and clarify.

Global BSL_SecResult_GetAsBytestr (const BSL_SecResult_t *self, BSL_Data_t *out)

Clarify whether result contains copy or view of content

Global BSL_SecurityResponseSet_Init (BSL_SecurityResponseSet_t *self)

This is still undefined.

Global BSL_TlmCounters_IncrementCounter (BSL_LibCtx_t *bsl, BSL_TlmCounterIndex_e tlm_index, uint64_t count)

File CryptoInterface.h

Significant perform tidying and housekeeping.

Global mock_bpa_register_policy_from_json (const char *pp_cfg_file_path, BSLP_PolicyProvider_t *policy, mock_bpa_policy_registry_t *reg)

Handle ION events as policy actions - dependent on other BSL issues/ future changes

File PublicInterfaceImpl.c

MAJOR Complete implementation for ApplySecurity so it can drop blocks or bundles as-needed.

File SecurityContext.c

Enable checking (not just using a stub returning True.)

Complete implementation for BCB acceptor.