pub fn break_glass_consumption_decision(
facts: BreakGlassConsumptionFacts,
) -> BreakGlassConsumptionDecisionExpand description
Admit only an exact, positive-timestamp mutation of the current pending proposal, with no uncommitted metadata tail.
Every refusal reports the first failing check, in this order: a missing
proposal, a nonpositive consumption timestamp (0 is the unconsumed
sentinel), a stale proposal, then an uncommitted tail.