pub fn land_unit(
u: &Unit,
host: &Host,
resolver: Option<&Resolver>,
) -> Result<FileReport, Box<dyn Error>>Expand description
Land one file: weave, then the certificate, then the resolver behind the
gate. Err only for a failure of the whole run (the resolver cannot be
started at all).
A clean weave merge the certificate admits with its v2 rule set is PROVEN.
One it admits only by also allowing UNION_ALLOWANCES — weave united
elements two sides inserted into one collection, and the certificate’s
independent elem_union check, reading the four parse trees, found every
inserted element verbatim, base order kept, no key twice, a construct the
policy calls a set, and a result that parses — lands VERIFIED, after the
same gate a resolver’s answer must pass (DROPPED / UNDELETED included),
with no resolver call. When the region-by-region verdict fails, the
check also reads the whole file as one statement list (both sides
appending named top-level declarations at one point). Not PROVEN: PROVEN means the certificate’s
fixed proof rule set, measured before it was adopted; elem_union is a
policy about which collections are sets, not a three-way selection, and
it has not been measured that way. Any doubt — the check declines or
crashes, the gate fails — sends the file on to the resolver, as before.