Module binding 

Binding-safe façade for the canonical durable transition protocol.

CanonicalKernel is the public pair that hosts need: the transaction decides whether an envelope is accepted, while the driver decides what the accepted input means. Keeping the pair behind one handle makes two invalid call sequences unavailable to bindings:

• a host cannot call the semantic planner without first preparing a durable record;
• a host cannot commit the transaction without also advancing the driver’s committed fold.

There is intentionally no step method. Production callers must prepare, CAS-append the exact core-produced record bytes, then commit. Checkpoint restore mutates the handle in place so a binding object keeps its identity across a CAS rebuild.

Structs

CanonicalKernel

One canonical operation driven exclusively through the durable transition protocol.