that functions can "delegate" checks to inner functions, // and if there's anything non-approved in the stack, the final result is // negative. Finally, we expose indicatorUnset as negative to the user, so that // we don't need to explicitly annotate fully non-approved services. //go:linkname getIndicator crypto/internal/fips140.getIndicator func getIndicator() uint8 //go:linkname setIndicator crypto/internal/fips140.setIndicator func setIndicator(uint8) const ( indicatorUnset uint8 = iota indicatorFalse...