Module control 

Controlled admission: verified principal, controlled store, and explicit conflict resolution.

Every local or peer actor operation that mutates a controlled resource or its nodes enters admission. Admission validates the verified principal, resource scope, operation, target selector, and expected revisions, then durably records the command. It never calls an actor directly or bypasses the queue.

Structs

AdmissionFences

The admission predicates record_admission re-evaluates under the same lock that writes the admission. What the proxy checked before opening the transaction is a preview; these fences are the authoritative read.

AdmissionReceipt

Durable receipt issued upon successful admission into the queue.

AdmissionRequest

Admission request submitted to the Intervention Proxy.

FenceFacts

The fence state one recheck observes, gathered under the store’s write lock. evaluate_fences turns facts into the same conflict the pre-commit checks would have raised.

InMemoryControlledStore

In-memory controlled store implementing ControlledStore for tests and isolated execution.

InterventionProxy

Intervention Proxy: durably admits operations, enforcing authorization, idempotency, monotonic stops, revision ordering, and queue admission barriers.

Enums

AdmissionConflict

Explicit typed conflict when admission is rejected.

ControlOperation

Semantic control operations entering the admission queue.

ControlScope

Scope of a control command.

OperationGrant

Operation-scoped authorization grant.

VerifiedPrincipal

Verified principal constructing an internal, non-serializable proof of authority.

Traits

ControlledStore

Port/contract for the controlled store managing graph state, revisions, and admission log.

Functions

evaluate_fences

Authoritative fence evaluation: identical conflicts to the proxy’s prechecks, raised inside the committing transaction. ControlledStore implementors call this after gathering FenceFacts under their write lock — it is part of the port contract, not an internal helper.