Module store 

Unix cooperative durable state, not an executor. One private directory per intent, provisioned by the trusted operator. Never deletes a completed record.

Structs

DispatchAuthorization

A single, store-bound authorization created only after Unknown is synced. Not Clone: a mutation host must consume this value, never accept a separate request. The mutable borrow keeps the locked store alive until consumption. This is sequencing authority only, not adapter authentication.

Store

Keeps the directory lock until drop. Do not release this guard between the durable Unknown transition and a future dispatch/result commit. A failed commit poisons this guard; reopen and reconcile rather than retry mutation.