supportpkg

Documentation

Overview

Package supportpkg derives a privacy-reduced "support" package from a sealed forensic package (plan §4, §17). Redaction happens post-hoc on a copy — the original forensic evidence is never modified. A redaction-manifest records categories/counts/offsets only, never values, and binds the derived package to its source by hash.

Index

• type RedactionEntry
• type RedactionManifest
  • func Export(srcPkg, dstPkg string) (*RedactionManifest, error)

Types

type RedactionEntry

type RedactionEntry struct {
	LogicalPath    string         `json:"logical_path"`
	OriginalSHA256 string         `json:"original_sha256"`
	RedactedSHA256 string         `json:"redacted_sha256"`
	Categories     map[string]int `json:"categories"`
}

RedactionEntry records one artifact's redactions (no values).

type RedactionManifest

type RedactionManifest struct {
	GeneratedUTC    string           `json:"generated_utc"`
	SourceCaseID    string           `json:"source_case_id"`
	SourcePackage   string           `json:"source_package"`
	SourceSumsSHA   string           `json:"source_sha256sums_digest"`
	RedactedEntries []RedactionEntry `json:"redacted_entries"`
	Note            string           `json:"note"`
}

RedactionManifest binds the support package to its forensic source.

func Export

func Export(srcPkg, dstPkg string) (*RedactionManifest, error)

Export derives a redacted support package from srcPkg into dstPkg. It rebuilds a fresh sealed package containing redacted copies, so the support package is itself verifiable.