Module claim 

Sequence-zero membership and one-vault claim, without transport.

The fixed genesis profile uses strict Ed25519 and an HPKE base-mode self grant. Operator setup authority, not the self signature, admits the first device. Public validation cannot prove the encrypted self grant is usable. Hosts must verify it and persist exact authority outside replaceable databases before use. A fixed signed publication successor preserves genesis authority. Neither preparation nor server acceptance enables client sync or advances a local protected checkpoint.

Re-exports

pub use publication::PUBLICATION_BYTES;

pub use publication::Publication;

pub use publication::PublicationBinding;

pub use publication::PublicationOutcome;

Modules

codec

membership

Pure signed membership transitions and recipient-verified generation coverage.

peer

Shared PSK invitation, request PoP and independent installation key primitives.

publication

Fixed genesis-to-PublishBootstrap signed profile. Signing prepares intent only; it neither persists dispatch ownership nor adopts membership. Hosts must not dispatch from a never-dispatched capture journal.

Structs

ClaimResult

Equality result, not proof of READY, active membership or physical durability.

Genesis

Immutable, publicly verified sequence-zero record. Not proof of admission.

Secret

A high-entropy secret with redacted diagnostics. Never serialize into task data.

SeedAuthority

Private seed material and pinned exact genesis, validated against package authority. Construction alone is not durable. The host must save before making a request.

SetupAuthority

Operator-configured public verifier. Never accept this value from a claimant.

StorageNotEmpty

Server storage must not contain local domain data or sync history.

Enums

ClaimAuthentication

ClaimRefusal

A claim refusal decided inside the claim transaction. Any other claim error leaves the outcome unknown to the claimant.

Constants

CLAIM_BYTES

GENESIS_BYTES

SEED_STORAGE_BYTES

Signing seed, HPKE private key, token and exact public genesis. Host-only storage.

Functions

credential_verifier

generation_commitment