Module model 

Persisted records and their local invariants.

Modules

application_ingress

Opaque application update declarations under original mutation or observation reservations.

artifacts

Canonical SHA-256 artifact metadata; filesystem effects belong to ops.

attempt_journal

Durable finite local attempt accounting adapted from Canic’s pending/receipt contracts.

command_custody

Validated v1 evidence binding one command sidecar to an exact journal operation.

control_authority

Canonical bounded controller identities used by IC status decoding.

download_journal

Exact local artifact identity and model-owned download lifecycle transitions.

effect_graph

Immutable explicit operation dependencies; no universal application ordering or authority.

execution_settlement

Immutable exact original journal fingerprints; not a backup/restore terminal receipt.

execution_workflow

Original stage allocations and exact learned-plan bindings; no second spending ledger.

ic_lifecycle_reply

Bounded lifecycle acknowledgements and status/controller projections.

ic_mutation

Exact reserved IC mutation identity and bounded passive reply association.

ic_observation

Exact already reserved IC recovery observations and bounded passive replies.

ic_request

Closed host-ingress IC request codec; no transport, authority or effect admission.

ic_snapshot_coverage

Incremental coverage of admitted snapshot replies, without IO or durable progress.

ic_snapshot_data

Metadata-bound snapshot data codecs, without dispatch or transfer completion.

ic_snapshot_download

Bounded metadata-derived exact download plans; no calls, spending or transfer proof.

ic_snapshot_metadata

Bounded snapshot metadata reads; decoded declarations do not prove transfer.

ic_snapshot_reply

Bounded capture/inventory reply decoding; transport authenticity stays external.

ic_snapshot_transfer_read

Exact originally reserved metadata/data reads; no dispatch or transfer attestation.

ic_snapshot_upload

Exact same-target snapshot upload codecs and passive original-reservation binding.

ic_snapshot_upload_data_observation

Exact already reserved destination-data observations of unresolved uploads.

ic_snapshot_upload_observation

Exact reserved inventory observations of unresolved metadata uploads.

ic_update_response

Shared passive IC update-response fields, bounded admission and redacted formatting.

inventory

Canonical bounded physical inventories; declarations do not establish live membership.

inventory_settlement

Passive independently qualified original snapshot-creation claims.

operation_plan

Immutable local binding of declarations to graph operations and original attempt authority.

restore_references

Maintained v1 restore dependencies and model-owned retention transitions.

restore_safety

Original restore/source requirements and ephemeral application-owned safety evidence.