Module crosschecked_anchor_store 

Persistent, fail-closed CrossChecked commitment recording.

This module is intentionally not registered as an HTTP route. It provides the durable authority, idempotency, signature-journal, and authenticated readback boundary required before a route can be activated in a later, separately reviewed change.

Structs

AnchorNodeIdentity

Node identity pinned into both receipt and response signatures.

AnchorRecord

Cryptographically validated record returned after commit or exact replay.

AnchorStore

SQLite-backed store. Each operation opens its own connection so callers may safely share the store across worker threads.

AnchorStoreConfig

Immutable runtime policy persisted at store creation and checked on reopen.

AuthenticatedAnchorReadback

Cryptographically authenticated stored record returned by readback.

AuthorityGovernanceAuthorizationV1

RFC 9591 FROST(Ed25519, SHA-512) authorization for one exact authority mutation.

AuthorityProvisioningV1

Complete owner-authorized provisioning package persisted as one snapshot.

AuthorityRetirementV1

Signed retirement of one exact authority key epoch.

CrossCheckedScopeBindingV1

Signed binding between one child authority and one opaque workspace scope.

SubmissionContext

A transport-bound submission supplied by a future route adapter.

Enums

AnchorConflictKind

Stable idempotency conflict categories suitable for later HTTP 409 mapping.

AnchorRecordDisposition

Whether a response was newly committed or returned from exact durable replay.

AnchorStoreError

Closed storage and authorization errors.

AuthorityLifecycleEventV1

Closed authority lifecycle event signed by the CrossChecked governance group.

SignOnceError

Errors from a signer that durably binds one operation ID to one payload.

Constants

CROSSCHECKED_GOVERNANCE_PARTICIPANTS

CROSSCHECKED_GOVERNANCE_THRESHOLD

Traits

DurableAnchorSigner

Signer boundary required by the persistence service.

Functions

anchor_node_policy_hash

Commitment to every immutable node policy field governing authority mutations.

authority_chain_fingerprint

Hash the complete ordered delegation chain through its signed link IDs.