Module restore_safety 

Original restore/source requirements and ephemeral application-owned safety evidence.

Structs

RestoreFenceBindingRecord

Original integration-retained fence and authority revisions; never a release token.

RestoreFenceEvidence

Passive exact fence evidence; every opaque field requires application qualification.

RestoreSafetyObservation

Canonical immutable ephemeral observation; no Serde, expiry or persisted authority flag.

RestoreSafetyObservationInput

Passive provider data; exact original context/source and current evidence are independent inputs.

RestoreSafetyRequest

Ephemeral original-source/safety/challenge request; no dispatch or paid-call permit.

RestoreSafetyRequestInput

Passive current parameters; the exact load/start boundary is derived from original wire bytes.

RestoreSafetyRequirementRecord

Strict v1 immutable restore intent, original source and safety declaration.

RestoreSafetyRequirementRequest

Passive original source and application safety declaration; no neutral default.

TargetRestoreEvidence

Passive actual lifecycle and integration-qualified source-specific restored acceptance.

Enums

RestoreSafetyEvidence

Actual application safety lane; no generic default or serialized Proven admission.

RestoreSafetyLaneRecord

Explicit original safety lane; neither declaration proves the application safe.

RestoreSafetyObservationError

Typed owning-boundary current evidence admission denial.

RestoreSafetyRequestError

Typed original request denial; changes no source, fence, spending or journal.

RestoreSafetyRequirementError

Typed original source/safety declaration denial; retains all existing obligations.

Constants

MAX_RESTORE_SAFETY_REMOTE_OBSERVATIONS

Maximum descriptive remote observations per invocation; no spending allowance.

MAX_RESTORE_SAFETY_REQUIREMENT_BYTES

Maximum raw input and canonical output bytes for the retained safety requirement.