Expand description
Pure transitions for a single removal intent. No filesystem, dispatch, namespace discovery or lease migration. A durable coordinator must commit the returned state under its generation lock BEFORE the corresponding effect.
Structs§
- Intent
- Fields are private so ordinary callers cannot skip ownership validation. Restore accepts only an operator-protected state record with independent expected request pins; it does not authenticate disk bytes or prevent rollback.