Expand description
Lifecycle evidence journal. No process execution or old-lease conversion. Only the private durable store may publish a record or issue dispatch tokens.
Structs§
- Create
Plan - Dispatch
- Single-use, non-Clone, borrowed from a held journal. The future installed host must accept this token, not a free Request. No engine execution exists here.
- Journal
- Holds a nonblocking exclusive resource-directory lock. Dispatch is unavailable after reopen until a new request has been durably prepared. Directory must be provisioned by Core; this store never discovers or migrates another lease.
- Operator
Recovery - Reservation
- Resolution
Dispatch - Non-Clone, borrowed, one-use authorization for only the reserved ResolveImage.
- Service
Slot - Holds the resource lock and immutable start specification. Drop never releases the durable fence. Only the bound journal’s verified absence can release it.
Enums§
- Purpose
- Supplied by the trusted Core command path, never parsed from adapter output. This expresses policy; it does not authenticate the human/operator itself.