Module mesh_admit_gate 

Verdict sources and the cryptographic admission gate (P3-K1).

Split from mesh_admit, which re-exports everything here.

Structs

AdmissionRecord

One admission outcome, kept for doctor / journaling by the owner.

CryptoGate

Cryptographic admission: genesis pin, revocation, verdict, mode.

GateVerdictSource

Collapsed-mode verdict source: the local governance gate, asked the cluster.join action, so collapsed and service mode share one path. The gate is bound late because the mesh listener starts before the governance gate is built at boot; until bound, requests are Verdict::Unavailable.

OpenVerdicts

Permits every request (no governance configured).

VerdictRequest

Request to the cluster-owner for a join verdict.

Enums

Verdict

Verdict on a join request.

Constants

DENY_TTL

How long a denial is cached (short: an owner who changes their mind should not wait five minutes).

VERDICT_TTL

Default verdict cache lifetime.

Traits

VerdictSource

Source of peer.admit verdicts. In service mode this is the cluster-owner daemon; in collapsed mode GateVerdictSource.

Functions

install_nested_peer_ceiling

nested_peer_ceiling_active

Nested instances must never take the legacy unverified outbound-seed path.