Module thread_replication 

Portable Thread identity and immutable replication operations. Source and discussion causality have separate graphs so selective sharing is closed.

Re-exports

pub use capture_visibility::CaptureVisibility;

pub use source_author::AuthoredCapture;

pub use source_author::SOURCE_AUTHORIZATION_METHOD;

pub use source_author::SourceAuthor;

Modules

capture_visibility

Privacy declarations travel inside the original signed source result. A courier cannot drop local declarations while retaining its author proof.

hosted_import

Hosted import is an executor attestation of provider provenance. The original creator-signed genesis and imported Git authorship are never replaced by a claim that the initiating human signed a future source capture.

integration

Hosted landing is an executor attestation, never a human signature or a transferable grant. Trust comes from the receiver’s selected remote and verified immutable Spool genesis, independently of incoming operation bytes.

local_integration

Authored device integration. This is ordinary source work, never a hosted executor’s policy approval. Admission separately authorizes both Threads and verifies the referenced original source operation before storing this record.

metadata

Caller-signed Thread controls with independent causal registers. Concurrent writes to one property remain visible candidates; no arrival-time winner is selected. Controls describe intent and policy, never grant recipient rights.

ownership_claim

Explicit transition from immutable local-key genesis ownership to an account. Signatures and account capability admission are separate verification layers.

ownership_resolution

Owner adjudication of conflicting explicit ownership claims over one Thread. The surviving claim and the complete accepted source frontier are signed by the adjudicating owner authority. Signature and account capability admission are separate verification layers, exactly as for the ownership claim.

source_author

Original source authorship is signed with the capture, independently of its courier. These codecs bind claims; admission verifies the actual authority.

Structs

Capture

Source result shared by authored captures and executor-derived integrations. Per-Thread reference metadata never changes State identity.

ThreadGenesis

ThreadOperation

Enums

Admission

Durable causal admission. Receiving bytes alone does not accept an operation.

GenesisOwner

Ownership fixed by the original signed genesis. Hosting a key-owned Thread requires a separately verified, explicit ownership claim.

ThreadFacet

ThreadOperationBody

Constants

GENESIS_FORMAT

MAX_OPERATION_BYTES

OPERATION_FORMAT