Module retrieval 

On-demand content acquisition. Sources supply untrusted packages; the local engine supplies the independently selected chain view. Missing peers do not imply missing chain data: a known locator can fall back to full witness blocks.

Structs

FetchLimits

Explicit acquisition budgets, independent of protocol geometry limits.

Traits

RecordSource

A data source, not a chain verifier or completeness authority. Implementations must bound their own I/O; the caller’s deadline is checked between callbacks.

Functions

fetch_record

Fetch one structurally valid V0 record. This does not check a signed parent reference hash: multipart reconstruction performs that check AFTER proof. A returned record is relative to the local selected view at retrieval time.

recover

Recover an object without exporting partial output. This reuses the existing root/leaf/data signed-reference and final length/digest checks. Reorg during recovery invalidates the result; cached immutable bytes remain reusable. The scratch directory belongs to the caller. No plaintext decryption occurs.

recover_and_pin

Recover and protect all exact members in the same completion transaction. On failure, no new completion or pin is published; independently verified partial cache entries may remain. No user decryption key is required.