Module freeze 

Topic-freeze signature, scope, and replacement decisions.

Structs

FreezeReplacementFacts

Facts checked before a freeze mutation enters the metadata log.

FreezeSignatureFacts

Facts used by the ordered six-rule signature admission.

Enums

FreezeIdentityState

How far a signed record passed through the principal-binding rules.

FreezeMutationDecision

The single externally observable result of authorization plus freeze admission.

FreezeMutationKind

Every operation whose interaction with a topic freeze is deliberate.

FreezeReplacementDecision

Why a freeze mutation may or may not enter the metadata log.

FreezeScopeDecision

Whether a matching scope replaces the current resolver candidate.

FreezeScopeRank

The precedence of one scope that matches a topic.

FreezeSignatureDecision

The first failed rule, or admission after all six pass.

FreezeStoredState

The committed entry at the exact incoming scope key.

Functions

freeze_mutation_decision

Rank authorization ahead of freeze detail, then apply the one refusal classification shared by every mutation adapter.

freeze_refuses

Classify the complete topic-mutation inventory under a live freeze.

freeze_replacement_decision

Admit only a new freeze or a strictly newer exact-key replacement, with no uncommitted metadata tail; see freeze_replacement_model. The controller retries only InFlight, so every variant is pinned.

freeze_scope_decision

Make every caller use literal-over-prefix and longest-prefix precedence.

freeze_signature_decision

Apply the six signature rules in their security-sensitive order.

freeze_timestamp_in_window

Check the symmetric skew window with saturating machine bounds.