celatim 0.1.0__py3-none-any.whl

celatim/__init__.py

@@ -0,0 +1,693 @@
+"""celatim — reproducible measurement of covert-channel capacity in unused,
+reserved, and optional protocol fields (RFC tunnel survey)."""
+
+from .adapter import (
+    AdapterCapability,
+    AdapterPath,
+    AdapterPathKind,
+    AdapterStatus,
+    CarrierUnit,
+    MechanismAdapter,
+    adapter_for,
+)
+from .api import (
+    NETNS_LAB_SCHEMA_VERSION,
+    EndpointReceiveResult,
+    EndpointRoundtripResult,
+    EndpointSendResult,
+    LabCommandPlan,
+    LabTopologyResult,
+    PayloadSource,
+    check_installation,
+    decode_pcap_payload,
+    manage_netns_lab,
+    netns_lab_config_to_json,
+    payload_from_file,
+    payload_from_hex,
+    payload_from_text,
+    random_payload,
+    receive_payload,
+    receive_scenario_payload,
+    roundtrip_payload,
+    roundtrip_scenario_payload,
+    run_evidence_payload,
+    run_observed_timing_sweep_payload,
+    run_timing_sweep_payload,
+    scrub_pcap_payload,
+    send_payload,
+    send_scenario_payload,
+)
+from .catalog import load_mechanisms
+from .channel import (
+    AnyCodec,
+    BitReader,
+    BitWriter,
+    Channel,
+    Codec,
+    FixedWidthCodec,
+    Framer,
+    IdealWire,
+    MiddleboxWire,
+    SymbolChoiceCodec,
+    VariableLengthCodec,
+    build_registry,
+    codec_for,
+)
+from .crypto_transcript import (
+    ECDSA_NONCE_CLAIM_STATUS,
+    ECDSA_NONCE_TRANSCRIPT_SCHEMA_VERSION,
+    ECDSA_NONCE_TRANSPORT_KIND,
+    ECDSA_NONCE_TRANSPORT_METADATA_SCHEMA_VERSION,
+    RSA_PSS_SALT_CLAIM_STATUS,
+    RSA_PSS_SALT_TRANSCRIPT_SCHEMA_VERSION,
+    RSA_PSS_SALT_TRANSPORT_KIND,
+    RSA_PSS_SALT_TRANSPORT_METADATA_SCHEMA_VERSION,
+    EcdsaNonceTranscriptConfig,
+    EcdsaNonceTranscriptReplayTransport,
+    EcdsaNonceTranscriptTransport,
+    RsaPssSaltTranscriptConfig,
+    RsaPssSaltTranscriptReplayTransport,
+    RsaPssSaltTranscriptTransport,
+)
+from .detect import (
+    DETECTOR_REPLAY_CORPUS_SCHEMA_VERSION,
+    DETECTOR_REPLAY_SCHEMA_VERSION,
+    DETECTOR_TRACE_MANIFEST_SCHEMA_VERSION,
+    FALSE_POSITIVE_SOURCE_KINDS,
+    SCRUB_CLAIM_STATUS,
+    SCRUB_REPORT_SCHEMA_VERSION,
+    STATEFUL_DETECTOR_CLAIM_STATUS,
+    DetectorImplementationKind,
+    DetectorProvenanceRecord,
+    DetectorReplayBackend,
+    DetectorReplayCorpusReport,
+    DetectorReplayMechanismResult,
+    DetectorReplayReport,
+    DetectorReplayTrace,
+    DetectorReplayTraceSpec,
+    DetectorReplayTraceSummary,
+    PcapScrubReport,
+    ScrubArtifact,
+    StatefulDetectorKind,
+    StatefulDetectorPlan,
+    TraceSourceKind,
+    bpf_filter,
+    classic_pcap_record_count,
+    coverage,
+    default_replay_mechanisms,
+    detector_provenance_for,
+    emittable,
+    iptables_u32_rule,
+    load_trace_manifest,
+    nftables_rule,
+    replay_detector_corpus,
+    replay_detectors_on_pcap,
+    scrub_pcap,
+    scrub_tcp_reserved_bits_pcap,
+    stateful_detector_plan_for,
+    stateful_detector_plans,
+    tcpdump_bpf_provenance_record,
+)
+from .discovery import (
+    MechanismDetail,
+    MechanismSummary,
+    get_mechanism_detail,
+    get_scenario,
+    list_mechanism_summaries,
+    list_scenario_ids,
+    list_scenarios,
+    plan_scenarios,
+)
+from .doctor import (
+    DOCTOR_SCHEMA_VERSION,
+    PACKAGE_EXTRA_MODULES,
+    TOOL_VERSION_COMMANDS,
+    DoctorCheck,
+    DoctorResult,
+    DoctorStatus,
+    run_doctor,
+)
+from .envelope import EnvelopeSymbols, build_send_envelope, parse_envelope_symbols
+from .errors import (
+    CelatimError,
+    ConfigurationError,
+    ControlFailureError,
+    DecodeError,
+    EncodeError,
+    EnvelopeValidationError,
+    ReceiveTimeoutError,
+    TransportError,
+    UnsupportedMechanismError,
+)
+from .evidence_index import (
+    INDEX_SCHEMA_VERSION,
+    PUBLIC_INDEX_SCHEMA_VERSION,
+    EvidenceArtifactRef,
+    EvidenceCaseIndex,
+    EvidenceIndexItem,
+    EvidenceIndexResult,
+    EvidenceScenarioMetadata,
+    PublicEvidenceCaseIndex,
+    PublicEvidenceIndexItem,
+    PublicEvidenceIndexResult,
+    build_evidence_index,
+    build_public_evidence_index,
+)
+from .inspection import (
+    DocumentSummary,
+    SchemaSummary,
+    get_detector_rule_artifacts,
+    get_detector_rule_manifest,
+    get_detector_scrub_guidance_markdown,
+    get_document_text,
+    get_protocol_rates_markdown,
+    get_protocol_throughput_estimates,
+    get_qemu_tap_preflight_report,
+    get_schema_text,
+    get_support_matrix_markdown,
+    get_support_matrix_report,
+    get_testbed_requirements,
+    get_windows_capture_guidance_markdown,
+    list_documents,
+    list_protocol_rates,
+    list_schemas,
+    write_detector_rule_files,
+)
+from .observer import (
+    ObserverMutationControlRecord,
+    ObserverValidationRecord,
+    ParserProvenanceRecord,
+    observer_mutation_controls_for,
+    observer_validations_for,
+    parser_provenance_for,
+)
+from .pcap_decode import (
+    PCAP_DECODE_CLAIM_STATUS,
+    PCAP_DECODE_SCHEMA_VERSION,
+    PcapDecodeArtifact,
+    PcapDecodeReport,
+    decode_pcap,
+)
+from .report import (
+    DetectorRuleArtifact,
+    ProtocolRate,
+    ProtocolThroughputEstimate,
+    SupportMatrixReport,
+    SupportMatrixRow,
+    detector_scrub_guidance_markdown,
+    windows_pktmon_guidance_markdown,
+)
+from .resources import catalog_path, doc_names, doc_text
+from .reviewer_bundle import (
+    BUNDLE_SCHEMA_VERSION,
+    BUNDLE_VERIFY_SCHEMA_VERSION,
+    PUBLIC_BUNDLE_PRIVATE_REFERENCE_POLICY,
+    PUBLIC_BUNDLE_RELEASE_SCOPE,
+    PUBLIC_BUNDLE_SCHEMA_VERSION,
+    PUBLIC_BUNDLE_VERIFY_SCHEMA_VERSION,
+    BundleArtifactRef,
+    BundleArtifactVerification,
+    BundleConsistencyCheck,
+    PublicBundleManifest,
+    PublicBundleVerification,
+    ReviewerBundleManifest,
+    ReviewerBundleVerification,
+    build_public_bundle_manifest,
+    build_reviewer_bundle_manifest,
+    verify_public_bundle_manifest,
+    verify_reviewer_bundle_manifest,
+)
+from .scenario import (
+    RUN_LOG_SCHEMA_VERSION,
+    SCENARIO_EVIDENCE_TIERS,
+    SCENARIO_EXECUTION_MODES,
+    SCENARIO_EXECUTION_PLAN_SCHEMA_VERSION,
+    SCENARIO_EXECUTION_PLAN_TARGETS,
+    SCENARIO_INVENTORY_SCHEMA_VERSION,
+    SCENARIO_PRIVILEGE_LEVELS,
+    EvidenceCaseResult,
+    EvidenceRunResult,
+    ReproducibilityMetadata,
+    ScenarioConfig,
+    ScenarioExecutionPlan,
+    ScenarioExecutionPlanItem,
+    ScenarioInventory,
+    ScenarioMetadata,
+    ScenarioSpecInfo,
+    TransportConfig,
+    build_scenario_execution_plan,
+    build_scenario_inventory,
+    discover_scenarios,
+    find_scenario,
+    load_scenario,
+    load_scenario_by_id,
+    run_evidence,
+    scenario_execution_ids,
+)
+from .session import (
+    ENDPOINT_TOPOLOGY_KINDS,
+    ChannelSession,
+    EndpointOsInfo,
+    EndpointOsMetadata,
+    EvidenceRecord,
+    InMemoryTransport,
+    MechanismProfile,
+    PacingConfig,
+    Receiver,
+    ReceiveResult,
+    ReliabilityPolicy,
+    ReliabilityStats,
+    RetransmitCapableTransport,
+    Sender,
+    SendReceipt,
+    SessionFramingConfig,
+    Tap,
+    ThroughputProfile,
+    TimeoutAwareTap,
+    TimingProfile,
+    TimingSample,
+    TimingTrace,
+    Transport,
+    local_endpoint_os,
+)
+from .testbed import (
+    EDNS_PADDING_OPTCODE,
+    ETH_P_ALL,
+    ETHERTYPE_IPV4,
+    IPV4_HEADER_BYTES,
+    MIN_ETHERNET_FRAME_BYTES,
+    TCP_HEADER_BYTES,
+    TESTBED_PROFILE_STATUSES,
+    TESTBED_REQUIREMENT_PROFILES,
+    TESTBED_REQUIREMENTS_SCHEMA_VERSION,
+    UDP_HEADER_BYTES,
+    AfpacketCarrierTransport,
+    AfpacketFrameSocket,
+    AfpacketRoundtripResult,
+    AfpacketSocketConfig,
+    AioquicConnectionIdPathConfig,
+    AioquicConnectionIdRoundtripResult,
+    AioquicConnectionIdTransport,
+    AioquicH3SettingsPathConfig,
+    AioquicH3SettingsRoundtripResult,
+    AioquicH3SettingsTransport,
+    CommandError,
+    CommandReadinessProbe,
+    CommandResult,
+    CommandRunner,
+    DaemonReadinessResult,
+    DigQueryConfig,
+    DnsEdnsPaddingPathConfig,
+    DnsEdnsPaddingReceiveResult,
+    DnsEdnsPaddingRoundtripResult,
+    DnsEdnsPaddingSendResult,
+    DnsmasqResolverConfig,
+    DnsToolVersionRecord,
+    EdnsPaddingPcapDecoder,
+    HostTapConfig,
+    HyperH2PingPathConfig,
+    HyperH2PingRoundtripResult,
+    HyperH2PingTransport,
+    Ipv4PacketPathConfig,
+    ManagedDaemon,
+    ManagedDaemonConfig,
+    NetnsPair,
+    NetnsPairConfig,
+    PacketProtocol,
+    QemuGuestConfig,
+    QemuTapPreflightCheck,
+    QemuTapPreflightReport,
+    ReadinessProbe,
+    TcpdumpCapture,
+    TcpdumpCaptureConfig,
+    TestbedRequirementInventory,
+    TestbedRequirementProfile,
+    build_testbed_requirements_inventory,
+    edns_padding_options_from_pcap,
+    receive_dns_edns0_padding,
+    run_afpacket_roundtrip,
+    run_aioquic_connection_id_roundtrip,
+    run_aioquic_h3_settings_roundtrip,
+    run_dns_edns0_padding_roundtrip,
+    run_hyper_h2_ping_roundtrip,
+    send_dns_edns0_padding,
+    testbed_profile_ids,
+    testbed_profiles_by_id,
+)
+from .timing_sweep import (
+    OBSERVED_TRACE_TIMING_SWEEP_CAPACITY_MODEL,
+    OBSERVED_TRACE_TIMING_SWEEP_CAPACITY_STATUS,
+    OBSERVED_TRACE_TIMING_SWEEP_CLAIM_STATUS,
+    OBSERVED_TRACE_TIMING_SWEEP_PATH_KIND,
+    TIMING_SWEEP_CAPACITY_MODEL,
+    TIMING_SWEEP_CAPACITY_STATUS,
+    TIMING_SWEEP_CLAIM_STATUS,
+    TIMING_SWEEP_PATH_KIND,
+    TIMING_SWEEP_SCHEMA_VERSION,
+    ObservedTimingCaseInput,
+    TimingSweepCase,
+    TimingSweepReport,
+    run_observed_timing_sweep,
+    run_timing_sweep,
+)
+from .transports import (
+    FILE_TRANSPORT_SCHEMA,
+    PCAP_TRANSPORT_LINKTYPE_ETHERNET,
+    PCAP_TRANSPORT_LINKTYPE_USER0,
+    FileTransport,
+    PcapCarrierExtraction,
+    PcapTransport,
+    TimedMemoryTransport,
+    extract_pcap_carriers,
+)
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "BUNDLE_SCHEMA_VERSION",
+    "BUNDLE_VERIFY_SCHEMA_VERSION",
+    "DETECTOR_REPLAY_CORPUS_SCHEMA_VERSION",
+    "DETECTOR_REPLAY_SCHEMA_VERSION",
+    "DETECTOR_TRACE_MANIFEST_SCHEMA_VERSION",
+    "DOCTOR_SCHEMA_VERSION",
+    "ECDSA_NONCE_CLAIM_STATUS",
+    "ECDSA_NONCE_TRANSCRIPT_SCHEMA_VERSION",
+    "ECDSA_NONCE_TRANSPORT_KIND",
+    "ECDSA_NONCE_TRANSPORT_METADATA_SCHEMA_VERSION",
+    "EDNS_PADDING_OPTCODE",
+    "ENDPOINT_TOPOLOGY_KINDS",
+    "ETHERTYPE_IPV4",
+    "ETH_P_ALL",
+    "FALSE_POSITIVE_SOURCE_KINDS",
+    "FILE_TRANSPORT_SCHEMA",
+    "INDEX_SCHEMA_VERSION",
+    "IPV4_HEADER_BYTES",
+    "MIN_ETHERNET_FRAME_BYTES",
+    "NETNS_LAB_SCHEMA_VERSION",
+    "OBSERVED_TRACE_TIMING_SWEEP_CAPACITY_MODEL",
+    "OBSERVED_TRACE_TIMING_SWEEP_CAPACITY_STATUS",
+    "OBSERVED_TRACE_TIMING_SWEEP_CLAIM_STATUS",
+    "OBSERVED_TRACE_TIMING_SWEEP_PATH_KIND",
+    "PACKAGE_EXTRA_MODULES",
+    "PCAP_DECODE_CLAIM_STATUS",
+    "PCAP_DECODE_SCHEMA_VERSION",
+    "PCAP_TRANSPORT_LINKTYPE_ETHERNET",
+    "PCAP_TRANSPORT_LINKTYPE_USER0",
+    "PUBLIC_BUNDLE_PRIVATE_REFERENCE_POLICY",
+    "PUBLIC_BUNDLE_RELEASE_SCOPE",
+    "PUBLIC_BUNDLE_SCHEMA_VERSION",
+    "PUBLIC_BUNDLE_VERIFY_SCHEMA_VERSION",
+    "PUBLIC_INDEX_SCHEMA_VERSION",
+    "RSA_PSS_SALT_CLAIM_STATUS",
+    "RSA_PSS_SALT_TRANSCRIPT_SCHEMA_VERSION",
+    "RSA_PSS_SALT_TRANSPORT_KIND",
+    "RSA_PSS_SALT_TRANSPORT_METADATA_SCHEMA_VERSION",
+    "RUN_LOG_SCHEMA_VERSION",
+    "SCENARIO_EVIDENCE_TIERS",
+    "SCENARIO_EXECUTION_MODES",
+    "SCENARIO_EXECUTION_PLAN_SCHEMA_VERSION",
+    "SCENARIO_EXECUTION_PLAN_TARGETS",
+    "SCENARIO_INVENTORY_SCHEMA_VERSION",
+    "SCENARIO_PRIVILEGE_LEVELS",
+    "SCRUB_CLAIM_STATUS",
+    "SCRUB_REPORT_SCHEMA_VERSION",
+    "STATEFUL_DETECTOR_CLAIM_STATUS",
+    "TCP_HEADER_BYTES",
+    "TESTBED_PROFILE_STATUSES",
+    "TESTBED_REQUIREMENTS_SCHEMA_VERSION",
+    "TESTBED_REQUIREMENT_PROFILES",
+    "TIMING_SWEEP_CAPACITY_MODEL",
+    "TIMING_SWEEP_CAPACITY_STATUS",
+    "TIMING_SWEEP_CLAIM_STATUS",
+    "TIMING_SWEEP_PATH_KIND",
+    "TIMING_SWEEP_SCHEMA_VERSION",
+    "TOOL_VERSION_COMMANDS",
+    "UDP_HEADER_BYTES",
+    "AdapterCapability",
+    "AdapterPath",
+    "AdapterPathKind",
+    "AdapterStatus",
+    "AfpacketCarrierTransport",
+    "AfpacketFrameSocket",
+    "AfpacketRoundtripResult",
+    "AfpacketSocketConfig",
+    "AioquicConnectionIdPathConfig",
+    "AioquicConnectionIdRoundtripResult",
+    "AioquicConnectionIdTransport",
+    "AioquicH3SettingsPathConfig",
+    "AioquicH3SettingsRoundtripResult",
+    "AioquicH3SettingsTransport",
+    "AnyCodec",
+    "BitReader",
+    "BitWriter",
+    "BundleArtifactRef",
+    "BundleArtifactVerification",
+    "BundleConsistencyCheck",
+    "CarrierUnit",
+    "CelatimError",
+    "Channel",
+    "ChannelSession",
+    "Codec",
+    "CommandError",
+    "CommandReadinessProbe",
+    "CommandResult",
+    "CommandRunner",
+    "ConfigurationError",
+    "ControlFailureError",
+    "DaemonReadinessResult",
+    "DecodeError",
+    "DetectorImplementationKind",
+    "DetectorProvenanceRecord",
+    "DetectorReplayBackend",
+    "DetectorReplayCorpusReport",
+    "DetectorReplayMechanismResult",
+    "DetectorReplayReport",
+    "DetectorReplayTrace",
+    "DetectorReplayTraceSpec",
+    "DetectorReplayTraceSummary",
+    "DetectorRuleArtifact",
+    "DigQueryConfig",
+    "DnsEdnsPaddingPathConfig",
+    "DnsEdnsPaddingReceiveResult",
+    "DnsEdnsPaddingRoundtripResult",
+    "DnsEdnsPaddingSendResult",
+    "DnsToolVersionRecord",
+    "DnsmasqResolverConfig",
+    "DoctorCheck",
+    "DoctorResult",
+    "DoctorStatus",
+    "DocumentSummary",
+    "EcdsaNonceTranscriptConfig",
+    "EcdsaNonceTranscriptReplayTransport",
+    "EcdsaNonceTranscriptTransport",
+    "EdnsPaddingPcapDecoder",
+    "EncodeError",
+    "EndpointOsInfo",
+    "EndpointOsMetadata",
+    "EndpointReceiveResult",
+    "EndpointRoundtripResult",
+    "EndpointSendResult",
+    "EnvelopeSymbols",
+    "EnvelopeValidationError",
+    "EvidenceArtifactRef",
+    "EvidenceCaseIndex",
+    "EvidenceCaseResult",
+    "EvidenceIndexItem",
+    "EvidenceIndexResult",
+    "EvidenceRecord",
+    "EvidenceRunResult",
+    "EvidenceScenarioMetadata",
+    "FileTransport",
+    "FixedWidthCodec",
+    "Framer",
+    "HostTapConfig",
+    "HyperH2PingPathConfig",
+    "HyperH2PingRoundtripResult",
+    "HyperH2PingTransport",
+    "IdealWire",
+    "InMemoryTransport",
+    "Ipv4PacketPathConfig",
+    "LabCommandPlan",
+    "LabTopologyResult",
+    "ManagedDaemon",
+    "ManagedDaemonConfig",
+    "MechanismAdapter",
+    "MechanismDetail",
+    "MechanismProfile",
+    "MechanismSummary",
+    "MiddleboxWire",
+    "NetnsPair",
+    "NetnsPairConfig",
+    "ObservedTimingCaseInput",
+    "ObserverMutationControlRecord",
+    "ObserverValidationRecord",
+    "PacingConfig",
+    "PacketProtocol",
+    "ParserProvenanceRecord",
+    "PayloadSource",
+    "PcapCarrierExtraction",
+    "PcapDecodeArtifact",
+    "PcapDecodeReport",
+    "PcapScrubReport",
+    "PcapTransport",
+    "ProtocolRate",
+    "ProtocolThroughputEstimate",
+    "PublicBundleManifest",
+    "PublicBundleVerification",
+    "PublicEvidenceCaseIndex",
+    "PublicEvidenceIndexItem",
+    "PublicEvidenceIndexResult",
+    "QemuGuestConfig",
+    "QemuTapPreflightCheck",
+    "QemuTapPreflightReport",
+    "ReadinessProbe",
+    "ReceiveResult",
+    "ReceiveTimeoutError",
+    "Receiver",
+    "ReliabilityPolicy",
+    "ReliabilityStats",
+    "ReproducibilityMetadata",
+    "RetransmitCapableTransport",
+    "ReviewerBundleManifest",
+    "ReviewerBundleVerification",
+    "RsaPssSaltTranscriptConfig",
+    "RsaPssSaltTranscriptReplayTransport",
+    "RsaPssSaltTranscriptTransport",
+    "ScenarioConfig",
+    "ScenarioExecutionPlan",
+    "ScenarioExecutionPlanItem",
+    "ScenarioInventory",
+    "ScenarioMetadata",
+    "ScenarioSpecInfo",
+    "SchemaSummary",
+    "ScrubArtifact",
+    "SendReceipt",
+    "Sender",
+    "SessionFramingConfig",
+    "StatefulDetectorKind",
+    "StatefulDetectorPlan",
+    "SupportMatrixReport",
+    "SupportMatrixRow",
+    "SymbolChoiceCodec",
+    "Tap",
+    "TcpdumpCapture",
+    "TcpdumpCaptureConfig",
+    "TestbedRequirementInventory",
+    "TestbedRequirementProfile",
+    "ThroughputProfile",
+    "TimedMemoryTransport",
+    "TimeoutAwareTap",
+    "TimingProfile",
+    "TimingSample",
+    "TimingSweepCase",
+    "TimingSweepReport",
+    "TimingTrace",
+    "TraceSourceKind",
+    "Transport",
+    "TransportConfig",
+    "TransportError",
+    "UnsupportedMechanismError",
+    "VariableLengthCodec",
+    "__version__",
+    "adapter_for",
+    "bpf_filter",
+    "build_evidence_index",
+    "build_public_bundle_manifest",
+    "build_public_evidence_index",
+    "build_registry",
+    "build_reviewer_bundle_manifest",
+    "build_scenario_execution_plan",
+    "build_scenario_inventory",
+    "build_send_envelope",
+    "build_testbed_requirements_inventory",
+    "catalog_path",
+    "check_installation",
+    "classic_pcap_record_count",
+    "codec_for",
+    "coverage",
+    "decode_pcap",
+    "decode_pcap_payload",
+    "default_replay_mechanisms",
+    "detector_provenance_for",
+    "detector_scrub_guidance_markdown",
+    "discover_scenarios",
+    "doc_names",
+    "doc_text",
+    "edns_padding_options_from_pcap",
+    "emittable",
+    "extract_pcap_carriers",
+    "find_scenario",
+    "get_detector_rule_artifacts",
+    "get_detector_rule_manifest",
+    "get_detector_scrub_guidance_markdown",
+    "get_document_text",
+    "get_mechanism_detail",
+    "get_protocol_rates_markdown",
+    "get_protocol_throughput_estimates",
+    "get_qemu_tap_preflight_report",
+    "get_scenario",
+    "get_schema_text",
+    "get_support_matrix_markdown",
+    "get_support_matrix_report",
+    "get_testbed_requirements",
+    "get_windows_capture_guidance_markdown",
+    "iptables_u32_rule",
+    "list_documents",
+    "list_mechanism_summaries",
+    "list_protocol_rates",
+    "list_scenario_ids",
+    "list_scenarios",
+    "list_schemas",
+    "load_mechanisms",
+    "load_scenario",
+    "load_scenario_by_id",
+    "load_trace_manifest",
+    "local_endpoint_os",
+    "manage_netns_lab",
+    "netns_lab_config_to_json",
+    "nftables_rule",
+    "observer_mutation_controls_for",
+    "observer_validations_for",
+    "parse_envelope_symbols",
+    "parser_provenance_for",
+    "payload_from_file",
+    "payload_from_hex",
+    "payload_from_text",
+    "plan_scenarios",
+    "random_payload",
+    "receive_dns_edns0_padding",
+    "receive_payload",
+    "receive_scenario_payload",
+    "replay_detector_corpus",
+    "replay_detectors_on_pcap",
+    "roundtrip_payload",
+    "roundtrip_scenario_payload",
+    "run_afpacket_roundtrip",
+    "run_aioquic_connection_id_roundtrip",
+    "run_aioquic_h3_settings_roundtrip",
+    "run_dns_edns0_padding_roundtrip",
+    "run_doctor",
+    "run_evidence",
+    "run_evidence_payload",
+    "run_hyper_h2_ping_roundtrip",
+    "run_observed_timing_sweep",
+    "run_observed_timing_sweep_payload",
+    "run_timing_sweep",
+    "run_timing_sweep_payload",
+    "scenario_execution_ids",
+    "scrub_pcap",
+    "scrub_pcap_payload",
+    "scrub_tcp_reserved_bits_pcap",
+    "send_dns_edns0_padding",
+    "send_payload",
+    "send_scenario_payload",
+    "stateful_detector_plan_for",
+    "stateful_detector_plans",
+    "tcpdump_bpf_provenance_record",
+    "testbed_profile_ids",
+    "testbed_profiles_by_id",
+    "verify_public_bundle_manifest",
+    "verify_reviewer_bundle_manifest",
+    "windows_pktmon_guidance_markdown",
+    "write_detector_rule_files",
+]