Crate sim_lib_operation_gate

Expand description

Declaration-driven gate for capability-scoped operations.

The gate contains no domain policy: callers provide a manifest declaration, exact approval verifier/use adapters, a record sink, and the performer.

Structs§

Approval: Approval presented for a reviewed operation.
DispatchId: Identity of a dispatch durably recorded before a performer is called.
GateContext: Dependencies used to guard one operation.
GateRecord: Audit record emitted after successful first performance.
OperationAttempt: One caller-selected attempt ordinal for a stable operation.
OperationAttemptId: Identity of one attempt record, kept separate from the operation id.
OperationDeclaration: Canonical operation declaration supplied by a domain manifest.
OperationDispatch: Exact durable handoff to an injected performer.
OperationGrant: Exact authority presented for one operation.
OperationGrantId: Identity of one separately recorded least-authority grant.
OperationId: Stable identity derived only from canonical immutable operation intent.
OperationIntent: Canonical semantic intent whose identity survives grants, attempts, and leases.
OperationRecord: Complete verified durable record for one operation.
OperationService: Journal-backed owner of durable operation intent, dispatch, and raw receipts.
PerformerReceipt: Raw performer acknowledgement bound to one durable dispatch.
PerformerReceiptId: Identity of a raw performer acknowledgement.

ApprovalDecision: Explicit approval decision.
DurableOperationState: The three durable states delivered by the operation-log phase.
ExecutionMode: Policy label for an operation. None implies reversibility.
OperationError: Typed refusal from durable operation construction, replay, or publication.
PerformerResponse: Result of one injected performer call.
ReplayPolicy: Replay rule bound into immutable operation intent.
SinkFailurePolicy: Policy for a record-sink failure after the operation performed.

ApprovalUse: Atomically consumes a verified approval once.
ApprovalVerifier: Validates approval authenticity and validity without consuming it.
GateRecordSink: Receives gate records.
OperationPerformer: Effect boundary used only after a matching dispatch is durable.

guard_operation: Guard and resolve an effect, returning the kernel’s result reference directly.