trixy-linux-client/native/README.md

Native credential boundary

This crate is the storage boundary used by the future Linux AppImage shell. Settings writes only server_address and username to the client settings.json. Session credentials are stored under the Linux kernel keyring service trixie.server.session, scoped by server address and username. load_session returns None when the keyring is unavailable; callers must return to credential entry and must not create a plaintext fallback.

The crate uses keyctl with argument arrays, never a shell command. It does not log or serialize session values.