Expand description
The single authorization chokepoint (spec invariant I5).
Every core read/write API requires a ScopedSpace, and this module is
the only place one can be constructed. Access rules live here once, so
surfaces cannot re-implement (and diverge on) them — the failure mode the
predecessor shipped (memory/bugs.md P-1).
Structs§
- Scoped
Space - Proof of access to one space. Construction is private to this module.
Functions§
- resolve
- Resolve a space by name, optionally creating it.