Module policy 

Pure decisions over validated declarations; no IO, scheduling or persisted mutations.

Modules

consistency

Pure original-guarantee and current stopped/drained/fence matching; no effects.

control_authority

Pure exact-result and direct caller-controller admission; no IO or dispatch authority.

download_integrity

Pure original-plan admission of durable local download declarations.

effect_order

Pure readiness over declared completion identities; no completion proof or dispatch.

execution_progress

Pure original-plan progress from exact retained journals; no scheduling or dispatch.

execution_settlement

Exact complete Applied local journal admission; no terminal or release authority.

fence_acquisition

Pure update acknowledgement association; never effect settlement or dispatch admission.

fence_obligation

Read retained acquisition spending under an exact original fence obligation.

fence_reconciliation

Pure reserved-observation and original-acquisition attribution matching; no settlement IO.

ic_mutation

Pure original IC update reply association using the existing bounded codecs.

ic_observation

Pure reserved IC observation association and passive qualified original effect claims.

ic_snapshot_upload

Pure current-reservation and passive upload-reply association; no IO or settlement.

ic_snapshot_upload_data_observation

Passive exact data-upload readback association; byte equality is no receipt.

ic_snapshot_upload_observation

Pure metadata-upload inventory association; no allocation outcome or receipt.

local_restore_source

Exact original local source manifest admission; no current restore/effect authority.

membership

Pure admission of a current provider result; no IO, scheduling or authority mutation.

restore_safety

Pure same-source and current application safety matching; no IO, effects or settlement.

selection

Explicit physical selection and bounded parent-edge expansion; no live discovery.

snapshot_inventory_delta

Pure snapshot inventory comparison, without capture attribution or settlement.

snapshot_read

Pure exact-result and caller snapshot-read checks; no IO, control or dispatch.