Module policy 

Pure decisions over validated declarations; no IO, scheduling or persisted mutations.

Modules

consistency

Pure original-guarantee and current stopped/drained/fence matching; no effects.

control_authority

Pure exact-result and direct caller-controller admission; no IO or dispatch authority.

download_integrity

Pure original-plan admission of durable local download declarations.

execution_progress

Pure original-plan progress from exact retained journals; no scheduling or dispatch.

execution_settlement

Exact complete Applied local journal admission; no terminal or release authority.

fence_acquisition

Pure update acknowledgement association; never effect settlement or dispatch admission.

fence_obligation

Read retained acquisition spending under an exact original fence obligation.

fence_reconciliation

Pure reserved-observation and original-acquisition attribution matching; no settlement IO.

ic_mutation

Pure original IC update reply association using the existing bounded codecs.

ic_observation

Pure reserved IC observation association and passive qualified original effect claims.

ic_snapshot_transfer_read

Pure current-reservation association using the original metadata/data decoder owners.

ic_snapshot_upload

Pure current-reservation and passive upload-reply association; no IO or settlement.

ic_snapshot_upload_data_observation

Passive exact data-upload readback association; byte equality is no receipt.

ic_snapshot_upload_observation

Pure metadata-upload inventory association; no allocation outcome or receipt.

local_restore_source

Exact original local source manifest admission; no current restore/effect authority.

membership

Pure admission of a current provider result; no IO, scheduling or authority mutation.

restore_safety

Pure same-source and current application safety matching; no IO, effects or settlement.

selection

Explicit physical selection and bounded parent-edge expansion; no live discovery.

snapshot_inventory_delta

Pure snapshot inventory comparison, without capture attribution or settlement.

snapshot_read

Pure exact-result and caller snapshot-read checks; no IO, control or dispatch.

Enums

InventorySettlementMismatch

Passive settlement claims differ from their independently qualified original evidence.

ResponseIdentityMismatch

Passive response claims differ from the original reserved update identity.

SettlementIdentityMismatch

Passive settlement claims differ from their independently qualified original evidence.