joy_crypt/session_wrap.rs
1//! Job-bound session wraps.
2//!
3//! When a status change creates a Job for an AI assignee on an
4//! encrypted item, the triggering principal wraps the relevant zone
5//! keys for the AI's ephemeral session pubkey and writes them into
6//! the Job record. Validity is state-based: the wrap is unusable
7//! once the Job lifecycle conditions no longer hold.