Module task_control 

Receiver-side authorization for signed task control operations.

This is the storage boundary, not a wire response: the transport must sign the returned status and bind it to the request before publishing it.

Enums

TaskControlError

Functions

cancel

Persist an authenticated owner’s cancellation before acknowledging it. Repeated cancellation returns the original terminal status and adds no history entry; a completed or failed task cannot be rewritten as canceled. Like get_status, this is a storage operation, not a signed wire response.

get_status

Authenticate the operation before touching storage; then enforce target ownership under the same lock as the status read. Never return task payloads or artifact references from this status-only boundary.