Struct Landing 

pub struct Landing<'a> {
    pub t: TimeMs,
    pub of: &'a Provenance,
    pub subject: &'a str,
    pub reviewed_by_person: bool,
}

What one merge writes down: four values that arrive together and are meaningless apart - a subject with nobody’s provenance under it says who merged nothing. reviewed_by_person adds one Reviewed-by: Name <email> trailer, and only when this repository’s git config also carries user.name and user.email: the city does not invent a person’s name.

Fields

t: TimeMs

Determinism rule 2: the signature carries the injected instant.

of: &'a Provenance

subject: &'a str

reviewed_by_person: bool