mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-10 00:26:59 +00:00
Prepare the establish executor to drive FMP rekey by activating the SwapSendState action (initiator K-bit cutover via cutover_to_new_session, with the gated decrypt-worker re-registration) and adding a CompleteDrain action (erase the drained previous session: free its index, drop its peers_by_index entry, unregister its decrypt session). Both reproduce the current inline rekey.rs cutover and drain bodies. The machine's drain mapping now emits CompleteDrain, using the real drained index rather than a shadow copy. Unwired: nothing drives the machine's rekey path yet (live rekey still runs inline), so these arms are unreachable and the change is behavior-neutral. The cadence fold that routes cutover and drain through the machine follows.