package hostexec

// InspectLocal reads through the same descriptor-relative, strict decoder as
// CheckLocal. The state alone grants no authority; callers still call CheckLocal
// under hostguard, which checks both lifetime locks and the boot deadline.
func InspectLocal(dataDir, host string) (State, error) {
	d, err := openLocal(dataDir)
	if err != nil {
		return State{}, err
	}
	defer d.close()
	return d.read(host)
}