pub fn spawn(
cancel: CancellationToken,
db: Arc<Db>,
config: RevocationsSource,
revocations_primed: Arc<AtomicBool>,
) -> JoinHandle<()>Expand description
revocations_primed flips to true after the first successful verify
- apply. The
/v1/*ready gate (#95) consults this whenrevocations_requiredis set so the daemon won’t serve agents until the full trust footprint is loaded - preventing the rebuild-revives- revoked-certs window noted in #70.