Module model 

Persisted records and their local invariants.

Modules

artifacts

Canonical SHA-256 artifact metadata; filesystem effects belong to ops.

attempt_journal

Durable finite local attempt accounting adapted from Canic’s pending/receipt contracts.

command_custody

Validated v1 evidence binding one command sidecar to an exact journal operation.

consistency

Original declared consistency and ephemeral current capture/fence evidence.

control_authority

Ephemeral direct-controller observations for exact IC mutation payloads; no dispatch permits.

download_journal

Exact local artifact identity and model-owned download lifecycle transitions.

effect_graph

Immutable explicit operation dependencies; no universal application ordering or authority.

ic_lifecycle_reply

Bounded lifecycle acknowledgements and status/controller projections.

ic_request

Closed host-ingress IC request codec; no transport, authority or effect admission.

ic_snapshot_reply

Bounded capture/inventory reply decoding; transport authenticity stays external.

inventory

Canonical bounded physical inventories; declarations do not establish live membership.

membership

Ephemeral membership checks bound to original intent; no persisted fresh-authority flags.

operation_plan

Immutable local binding of declarations to graph operations and original attempt authority.

restore_references

Maintained v1 restore dependencies and model-owned retention transitions.

snapshot_read

Ephemeral snapshot-list permission evidence; no control or paid-call authority.