Module break_glass_persistence 

Break-glass consumption and local-action persistence decisions.

Structs

BreakGlassConsumptionFacts

Facts checked before a consumed proposal enters the metadata log.

BreakGlassLocalActionFacts

Facts checked before an action outside the metadata log may start.

Enums

BreakGlassConsumptionDecision

Why a consumed proposal may or may not enter the metadata log.

BreakGlassLocalActionDecision

Whether a privileged local action may start.

BreakGlassLocalSpendState

Durable-spend state for an action outside the metadata log.

BreakGlassProposalState

How the incoming consume relates to the committed proposal image.

Functions

break_glass_consumption_decision

Admit only an exact, positive-timestamp mutation of the current pending proposal, with no uncommitted metadata tail.

break_glass_local_action_decision

Permit an ungated action, a retry whose spend already committed, or an exactly bound consume whose commit just succeeded. Every other order fails closed.