spawn

pub fn spawn(
    cancel: CancellationToken,
    allowed_nonces: Arc<RwLock<AllowedNoncesView>>,
    config: BootstrapNoncesSource,
    bootstrap_nonces_primed: Arc<AtomicBool>,
) -> JoinHandle<()>
Expand description

bootstrap_nonces_primed flips to true after the first successful verify + apply. The /v1/* ready gate consults this when bootstrap_nonces_required is set so the daemon won’t serve agents until the full trust footprint is loaded.