Add Buzz IFC execution domains

Cargo.toml

@@ -3,6 +3,7 @@ members = [
     "crates/buzz-relay",
     "crates/buzz-core",
     "crates/ifc-core",
+    "crates/buzz-ifc",
     "crates/buzz-conformance",
     "crates/buzz-push-gateway",
     "crates/buzz-db",
@@ -138,6 +139,8 @@ schemars = { version = "1", default-features = false }
 
 # Internal crates
 buzz-core = { path = "crates/buzz-core" }
+ifc-core = { path = "crates/ifc-core" }
+buzz-ifc = { path = "crates/buzz-ifc" }
 buzz-conformance = { path = "crates/buzz-conformance" }
 buzz-db = { path = "crates/buzz-db" }
 buzz-deletion = { path = "crates/buzz-deletion" }

Justfile

@@ -359,6 +359,10 @@ test-unit:
     set -euo pipefail
     ./scripts/test-ensure-local-relay-key.sh
     if command -v cargo-nextest &>/dev/null; then
+        # Check confidentiality and domain isolation in both IFC crates.
+        # nextest skips doctests, including the compile-fail API checks.
+        cargo nextest run -p ifc-core -p buzz-ifc
+        cargo test -p ifc-core -p buzz-ifc --doc
         cargo nextest run -p buzz-core -p buzz-auth --lib
         # buzz-auth NIP-FI verifier doctests. The sealed-authority
         # `compile_fail` doctests prove the default-feature public API alone

crates/buzz-ifc/Cargo.toml

@@ -0,0 +1,18 @@
+[package]
+name = "buzz-ifc"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "Buzz execution-domain derivation for information-flow control"
+
+[dependencies]
+buzz-core = { workspace = true }
+hex = { workspace = true }
+ifc-core = { workspace = true }
+nostr = { workspace = true }
+serde = { workspace = true }
+sha2 = { workspace = true }
+thiserror = { workspace = true }
+uuid = { workspace = true }