Module tail 

Current membership and generation rules for ordinary tail and image admission. Storage owners establish prefix identities, saved outcomes, parent state, attachment completeness and allocator ordering before committing effects.

Modules

envelope

Keyless envelope/projection parsing. Parsing is not device authorization.

parent

Functions

admit_generations

Only fresh appends require an unfrozen current generation. Saved outcomes must be resolved first under current authentication, including after rotation.

authenticate

Authenticate current device authority before checking the publication binding.

eligible_image

Historical-generation repair requires stored provenance for this exact descriptor. A known generation alone does not admit a new historical object.