Module model 

Persisted records and their local invariants.

Modules

artifacts

Canonical SHA-256 artifact metadata; filesystem effects belong to ops.

attempt_journal

Durable finite local attempt accounting adapted from Canic’s pending/receipt contracts.

command_custody

Validated v1 evidence binding one command sidecar to an exact journal operation.

consistency

Original declared consistency and ephemeral current capture/fence evidence.

control_authority

Ephemeral direct-controller observations for exact IC mutation payloads; no dispatch permits.

download_journal

Exact local artifact identity and model-owned download lifecycle transitions.

effect_graph

Immutable explicit operation dependencies; no universal application ordering or authority.

execution_settlement

Immutable exact original journal fingerprints; not a backup/restore terminal receipt.

fence_acquisition

Exact application update bytes and original fence acquisition reservation binding.

fence_obligation

Immutable original application fence obligations; spending belongs to attempt journals.

fence_reconciliation

Original fence-acquisition observation identity and exact retained reservation binding.

ic_lifecycle_reply

Bounded lifecycle acknowledgements and status/controller projections.

ic_mutation

Exact reserved IC mutation identity and bounded passive reply association.

ic_observation

Exact already reserved IC recovery observations and bounded passive replies.

ic_request

Closed host-ingress IC request codec; no transport, authority or effect admission.

ic_snapshot_coverage

Incremental coverage of admitted snapshot replies, without IO or durable progress.

ic_snapshot_data

Metadata-bound snapshot data codecs, without dispatch or transfer completion.

ic_snapshot_metadata

Bounded snapshot metadata reads; decoded declarations do not prove transfer.

ic_snapshot_reply

Bounded capture/inventory reply decoding; transport authenticity stays external.

ic_snapshot_transfer_read

Exact originally reserved metadata/data reads; no dispatch or transfer attestation.

ic_snapshot_upload

Exact same-target snapshot upload codecs and passive original-reservation binding.

ic_snapshot_upload_data_observation

Exact already reserved destination-data observations of unresolved uploads.

ic_snapshot_upload_observation

Exact reserved inventory observations of unresolved metadata uploads.

inventory

Canonical bounded physical inventories; declarations do not establish live membership.

membership

Ephemeral membership checks bound to original intent; no persisted fresh-authority flags.

operation_plan

Immutable local binding of declarations to graph operations and original attempt authority.

restore_references

Maintained v1 restore dependencies and model-owned retention transitions.

restore_safety

Original restore/source requirements and ephemeral application-owned safety evidence.

snapshot_read

Ephemeral snapshot-list permission evidence; no control or paid-call authority.