Module break_glass 

Break-glass proposal admission and deterministic selection.

Structs

BreakGlassProposalFacts

The independent lifecycle and approval facts of one covering proposal.

Enums

BreakGlassAdmission

First fail-closed reason that prevents a proposal from being spent.

BreakGlassApprovalSigning

Whether the proposal carries at least one approval and every approval carries a key id and a signature.

BreakGlassSignaturePolicy

Whether the configured policy requires signed approvals for the action.

Functions

break_glass_admission

Apply the break-glass lifecycle and approval checks in reporting order: each variant holds exactly when its check fails and every earlier one passes.

select_break_glass_candidate

Select the earliest (expiry, UUID high bits, UUID low bits) key; on an exact duplicate key, the first index wins.