keys.put(PacSignature.ETYPE_AES256_CTS_HMAC_SHA1_96, kdcKey);

        // Mock Pac construction to bypass complex validation
        try (MockedConstruction<Pac> pacMock = Mockito.mockConstruction(Pac.class, (mock, context) -> {
            // Setup mock behavior
            PacLogonInfo mockLogonInfo = Mockito.mock(PacLogonInfo.class);
            PacSignature mockServerSig = Mockito.mock(PacSignature.class);

/**
 * Collects problems that are encountered during model building. The primary purpose of this component is to account for
 * the fact that the problem reporter has/should not have information about the calling context and hence cannot provide
 * an expressive source hint for the model problem. Instead, the source hint is configured by the model builder before

Dann können Sie unter `templates/item.html` ein Template erstellen, mit z. B. folgendem Inhalt:

```jinja hl_lines="7"
{!../../docs_src/templates/templates/item.html!}
```

### Template-Kontextwerte { #template-context-values }

Im HTML, welches enthält:

{% raw %}

```jinja
Item ID: {{ id }}
```

{% endraw %}

... wird die `id` angezeigt, welche dem „Kontext“-`dict` entnommen wird, welches Sie übergeben haben:

    private final SmbPipeHandleInternal handle;

    /**
     * Creates a DCERPC pipe handle for named pipe communication
     * @param url the DCERPC URL specifying the endpoint
     * @param tc the CIFS context for connection configuration
     * @param unshared whether to use an exclusive connection
     * @throws DcerpcException if DCERPC initialization fails
     * @throws MalformedURLException if the URL is malformed
     */

     * is queried frequently and exceptions would be rather costly to
     * throw on a regular basis here.
     *
     * @param host the hostname to resolve
     * @param tc the CIFS context
     * @return resolved name, null if not found
     */
    public synchronized NbtAddress getByName(final String host, final CIFSContext tc) {
        return getByName(new Name(tc.getConfig(), host, 0x20, null), tc);
    }

                new DERTaggedObject(true, 1, new ASN1Integer(14)), // msg-type
        });

        // Create CONTEXT tagged object instead of APPLICATION
        DERTaggedObject contextTag = new DERTaggedObject(false, 14, apReqSequence);

        // Build inner content with OID and magic bytes

        NtlmUtil.E(p21, challenge, p24);
        return p24;
    }

    /**
     * Generate the ANSI DES hash for the password associated with these credentials.
     *
     * @param tc the CIFS context to use for configuration
     * @param password the password to hash
     * @param challenge the server challenge bytes
     * @return the calculated response

    /**
     * Sent by the server to indicate that the server and client are
     * on the same machine. This implies that the server will include
     * a local security context handle in the Type 2 message, for
     * use in local authentication.
     */
    int NTLMSSP_NEGOTIATE_LOCAL_CALL = 0x00004000;

    /**
     * Indicates that authenticated communication between the client

# ADR-0008 - Use NullAway for null checking

## Date

2025-08-06

## Context

Our codebase uses `null` extensively to represent an absence of value or optionality of the argument.
We utilize nullness annotations in Java code and somewhat rely on IDE warnings to guide us.
However, the Java code we have is not fully annotated, which causes several consequences:
* IDE warnings can be misleading

// parse k-v pairs of target ARN to stringified ReplicateTargetDecision delimited by ',' into a
// ReplicateDecision struct
func parseReplicateDecision(ctx context.Context, bucket, s string) (r ReplicateDecision, err error) {
	r = ReplicateDecision{
		targetsMap: make(map[string]replicateTargetDecision),
	}
	if len(s) == 0 {
		return r, err
	}