Interface KdfExecutionLimiter

All Known Implementing Classes:

NoLimitKdfExecutionLimiter, SemaphoreKdfExecutionLimiter

public interface KdfExecutionLimiter

Bounds the number of KDF invocations that may run concurrently.

The limiter applies uniformly to the real and dummy verification paths. Rejection is observable internally (as VERIFICATION_REJECTED_KDF_LIMIT) but never as a separate public signal — the verification pipeline maps it to the generic INVALID_CREDENTIALS response (CWE-203, CWE-400).

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static interface	KdfExecutionLimiter.Lease	Permit handle.

Method Summary

Modifier and Type	Method	Description
Optional<KdfExecutionLimiter.Lease>	acquire()	Tries to acquire a KDF permit.

Method Details

acquire

Optional<KdfExecutionLimiter.Lease> acquire()

Tries to acquire a KDF permit. Blocks up to KdfResourceBudget.maxWait() before giving up.

Returns:

an KdfExecutionLimiter.Lease that must be released, or Optional.empty() when the limiter refused