Versions in this module Expand all Collapse all v1 v1.8.1 Oct 20, 2026 v1.8.0 Oct 18, 2026 Changes in this version + const AttemptAbort + const AttemptBegin + const AttemptFinish + const DefaultPage + const DiscoverySchema + const LocalNoDispatchProfile + const MaxAttemptAssociation + const MaxAttemptBindingResponse + const MaxAttemptCommand + const MaxAttemptCurrentBinding + const MaxAttemptDescriptor + const MaxAttemptFact + const MaxAttemptFence + const MaxAttemptPointer + const MaxAttemptReceipt + const MaxAttemptSettlement + const MaxAttemptSettlementResponse + const MaxAuditIntent + const MaxContinuation + const MaxControllerCursor + const MaxControllerPage + const MaxControllerRecord + const MaxDocument + const MaxEvidence + const MaxLease + const MaxManifestSpec + const MaxMembers + const MaxOriginalLifecycleRecord + const MaxOriginalLifecycleReference + const MaxOriginalNativeReceipt + const MaxPage + const MaxPhaseCommand + const MaxPhaseOriginalResult + const MaxProviderEffectAttestation + const MaxProviderEffectBinding + const MaxProviderEffectCommand + const MaxProviderStep + const MaxProviderSteps + const MaxQuiescenceAttestation + const MaxQuiescenceBatchEntries + const MaxQuiescenceBatchEntry + const MaxQuiescenceBatchInput + const MaxQuiescenceBatchReceipt + const MaxQuiescenceBatchRecord + const MaxQuiescenceIndex + const MaxQuiescenceRecord + const MaxRecoveryAssociation + const MaxRecoveryAttestation + const MaxRecoveryBindings + const MaxRecoveryCurrent + const MaxRecoveryExport + const MaxRecoveryFact + const MaxRecoveryLeafSet + const MaxRecoveryNativeAcceptance + const MaxRecoveryNativeIntent + const MaxRecoveryReceipt + const MaxRecoverySteps + const MaxRemovalContinuationAssociation + const MaxRemovalContinuationClosure + const MaxRemovalContinuationMaterial + const MaxRemovalContinuationReceipt + const MaxRemovalContinuationRecord + const MaxRemovalContinuationRequest + const MaxRemovalRevalidation + const MaxReservations + const MaxStepRetryFact + const MaxStepRetryPointer + const MaxStepRetryRoot + const MaxSuccessorCommandRequest + const MaxWorkCursor + const MaxWorkHead + const MaxWorkPage + const MaxWorkPageItems + const MaxWorkReference + const MaxWriterFloor + const OriginalDrain + const OriginalRegistration + const PrefixOperation + const PrefixReservation + const ProviderEffectBindingKind + const ProviderEffectBindingProfile + const ProviderStepRetryProfile + const QuiescenceBatchHistory + const QuiescenceBatchReceiptSchema + const QuiescenceBatchRecordSchema + const QuiescenceBatchRequestSchema + const QuiescenceCurrent + const QuiescenceHistory + const RemovalRecoveryProfile + const WriterFloorSchema + var ErrAuthority = errors.New("managed: ownership or authority mismatch") + var ErrBlocked = errors.New("managed: unresolved lifecycle obligation") + var ErrCapacity = errors.New("managed: record capacity exceeded") + var ErrConflict = errors.New("managed: conflicting command or revision") + var ErrInvalid = errors.New("managed: invalid request") + var ErrNotFound = errors.New("managed: target not found") + var ErrUnavailable = errors.New("managed: protection authority unavailable") + var ErrUnsupported = errors.New("managed: protection capability unsupported") + var ErrWriterFloorCorrupt = errors.New("managed: protected writer floor is corrupt") + func ActionDigest(q ActionSubmission) (string, error) + func AttemptFenceFactDigest(fence AttemptFenceRecord) (string, error) + func Digest(b []byte) string + func EncodePhaseCommandRecord(r PhaseCommandRecord) ([]byte, error) + func EncodePhaseOriginalResult(r PhaseOriginalResult) ([]byte, error) + func EncodeProviderEffectBinding(record ProviderEffectBindingRecord) ([]byte, error) + func EncodeProviderEffectCommand(command ProviderEffectCommand) ([]byte, error) + func EncodeRecoveryRecord[T any](record RecoveryRecord[T]) ([]byte, error) + func EncodeWorkHead(h WorkHead) ([]byte, error) + func EncodeWorkPage(p WorkPage) ([]byte, error) + func EncodeWorkReference(r WorkReference) ([]byte, error) + func EncodeWriterFloor(floor WriterFloor) ([]byte, error) + func EncodeWriterFloorActivation(request WriterFloorActivation) ([]byte, error) + func MatchWriterFloor(floor WriterFloor, external WriterFloorReference) error + func OriginalDrainHandleDigest(targetDigest string, f OriginalDrainFacts) (string, error) + func OriginalIdentityDigest(i Identity) (string, error) + func PhaseCommandDigest(q PhaseCommandRequest) (string, error) + func ProjectionOwner(i Identity) (id.ID, error) + func ProviderEffectBindingAcceptanceDigest(requestDigest, factDigest string) (string, error) + func ProviderEffectBindingDigest(facts ProviderEffectBindingFacts) (string, error) + func ProviderEffectCommandDigest(raw []byte) (string, error) + func ProviderEffectOriginalEqual(left, right ProviderEffectOriginal) bool + func QuiescenceBatchScope(k Key) (string, error) + func QuiescenceChallengeDigest(leaf QuiescenceLeaf) (string, error) + func QuiescenceRecordDigest(r QuiescenceRecord) (string, error) + func QuiescenceScope(k Key, reservationID id.ID) (string, error) + func RecoveryCurrentDigest(current RemovalRevalidationCurrent) (string, error) + func RecoveryFactDigest[T any](facts T) (string, error) + func RecoveryFactKey(k AttemptKey, kind RecoveryRecordKind, operation id.ID, facts any) (string, error) + func RecoveryProofFresh(facts RemovalRevalidationFacts, now time.Time) bool + func RecoveryRecordLimit(kind RecoveryRecordKind) int + func RemovalContinuationDigest(q ContinuationRequest) (string, error) + func RequireRemovalRecovery(authority any) (RemovalRevalidationStore, ProviderInvocationStore, ProviderStepRetryStore, ...) + func RetryCurrentDigest(current ProviderStepRetryCurrent) (string, error) + func RetryPreviousDigest(previous ProviderStepRetryPrevious) (string, error) + func SameAuthority(configured, candidate any) bool + func ValidateProviderEffectBindingFacts(facts ProviderEffectBindingFacts) error + func ValidateProviderEffectOriginal(original ProviderEffectOriginal) error + func ValidateRecoveryAssociation(reference RecoveryAssociation) error + func ValidateRecoveryNativeExport(value RecoveryNativeExport) error + func ValidateRoleBinding(target Target, binding RoleBinding) error + func WriterFloorActivationDigest(request WriterFloorActivation) (string, error) + type AbortProof struct + Evidence []byte + FenceDigest string + Receipt []byte + ValidUntil time.Time + VerifiedAt time.Time + type AbortRequest struct + Proof AbortProof + type AcceptanceRequest struct + Receipt []byte + type AccessAuditReceipt struct + AcceptedAt time.Time + AuditID id.ID + Digest string + ID id.ID + type AccessAuditRequest struct + Action string + Actor AuditActor + ApplicationID string + AttemptID id.ID + Authority string + CorrelationID string + DecisionID string + Installation string + OccurredAt time.Time + OrganizationID string + Outcome string + Reason string + ResourceID string + ResourceKind string + Scope AuditScope + SelectorDigest string + type ActionKind string + const ActionContinue + const ActionDeploy + const ActionPause + const ActionRetire + const ActionRollback + type ActionReceipt struct + AcceptedAt time.Time + AuditID id.ID + CanonicalDigest string + DesiredRevision uint64 + ID id.ID + Key Key + OriginalDigest string + ReleaseID id.ID + Revision uint64 + Target Key + type ActionSubmission struct + Actor AuditActor + ApplicationID string + Authority string + CanonicalDigest string + ExpectedDesiredRevision uint64 + Installation string + Kind ActionKind + NewTarget *Identity + OccurredAt time.Time + OrganizationID string + OriginalCommand []byte + OriginalDigest string + ReleaseID id.ID + RollbackReleaseID id.ID + type AdmissionRequest struct + OperationID id.ID + Verifier string + type AttemptAbortRequest struct + Acceptance AttemptNativeAcceptance + ProofValidUntil time.Time + ProofVerifiedAt time.Time + ReservationID id.ID + func (v *AttemptAbortRequest) UnmarshalJSON(raw []byte) error + func (v AttemptAbortRequest) MarshalJSON() ([]byte, error) + type AttemptAdmission struct + AcceptedAt time.Time + AttemptRef AttemptRef + FenceSetDigest string + LocalOperationID id.ID + ParentRevision Decimal + ProviderOperationID id.ID + RegistrationSetDigest string + ResourcesDigest string + SchemaVersion Decimal + VerifierID string + type AttemptAdmissionRequest struct + VerifierID string + func (v *AttemptAdmissionRequest) UnmarshalJSON(raw []byte) error + func (v AttemptAdmissionRequest) MarshalJSON() ([]byte, error) + type AttemptBindingKey struct + ReservationID id.ID + type AttemptBindingRecord struct + Abort *AttemptTerminalRecord + Commands []AttemptCommandRecord + CurrentBinding *AttemptCurrentBindingObservation + DescriptorDigest string + Fence *AttemptFenceRecord + Finish *AttemptTerminalRecord + Key AttemptBindingKey + Witness *AttemptBindingSettlement + type AttemptBindingReference struct + OriginalRegistrationDigest string + OriginalRegistrationOperationID id.ID + ProcessDigest string + ReservationID id.ID + ReservationVersion Decimal + type AttemptBindingSettlement struct + CoverageDigest string + DescriptorDigest string + Disposition Disposition + FenceFactDigest string + Key AttemptBindingKey + LocalOperationID id.ID + NativeFenceDigest string + ParentRevision Decimal + RevocationDigest string + SchemaVersion Decimal + SettlementDigest string + WitnessedAt time.Time + type AttemptBindingSettlementRequest struct + FenceFactDigest string + ReservationID id.ID + func (v *AttemptBindingSettlementRequest) UnmarshalJSON(raw []byte) error + func (v AttemptBindingSettlementRequest) MarshalJSON() ([]byte, error) + type AttemptCommandGrant struct + Command AttemptCommandRecord + NewlyIssued bool + Receipt AttemptReceipt + type AttemptCommandKey struct + Kind string + type AttemptCommandRecord struct + AuthorizationDigest string + AuthorizationID id.ID + BindingReference AttemptBindingReference + CurrentBindingDigest string + DescriptorDigest string + ExpectedNativeVersion Decimal + IssuedAt time.Time + Key AttemptCommandKey + NativeCommand PortCommand + SchemaVersion Decimal + type AttemptCommandRequest struct + CurrentBinding *AttemptCurrentBindingObservation + ExpectedNativeVersion Decimal + Kind string + NativeCommand PortCommand + ReservationID id.ID + func (v *AttemptCommandRequest) UnmarshalJSON(raw []byte) error + func (v AttemptCommandRequest) MarshalJSON() ([]byte, error) + type AttemptCurrentBindingObservation struct + BindingReference AttemptBindingReference + BindingVersion Decimal + DescriptorDigest string + Evidence []byte + EvidenceDigest string + Key AttemptBindingKey + ObservedAt time.Time + RemovalEpoch Decimal + SchemaVersion Decimal + State string + ValidUntil time.Time + VerifierID string + type AttemptDescriptor struct + AcceptedAt time.Time + ActionID id.ID + AttemptID id.ID + Generation Decimal + IdentityDigest string + Key Key + ManifestDigest string + Predecessor *AttemptRef + ProjectionActionID id.ID + ProviderOperationID id.ID + RegistrationSetDigest string + ReservationIDs []id.ID + ResourcesDigest string + SchemaVersion Decimal + Seal Decimal + VerifierID string + type AttemptFenceRecord struct + CommandDigest string + DescriptorDigest string + Fence WireFence + Key AttemptBindingKey + LocalOperationID id.ID + SchemaVersion Decimal + type AttemptFenceRequest struct + Acceptance AttemptNativeAcceptance + Fence WireFence + ReservationID id.ID + func (v *AttemptFenceRequest) UnmarshalJSON(raw []byte) error + func (v AttemptFenceRequest) MarshalJSON() ([]byte, error) + type AttemptFinishRequest struct + Acceptance AttemptNativeAcceptance + ReservationID id.ID + func (v *AttemptFinishRequest) UnmarshalJSON(raw []byte) error + func (v AttemptFinishRequest) MarshalJSON() ([]byte, error) + type AttemptHistoricalSettlement struct + Admission *AttemptAdmission + AttemptRef AttemptRef + Request AttemptSettlementReadRequest + ResourcesDigest string + Revocation *AttemptRevocation + Settlement *AttemptSettlement + StepReferences []string + Witness AttemptBindingSettlement + type AttemptKey struct + AttemptID id.ID + Generation Decimal + type AttemptNativeAcceptance struct + NativeAcceptance AttemptNativeFacts + NativeFenceDigest string + OriginalBindingProof []byte + ProofDigest string + Receipt []byte + ReceiptDigest string + ReceiptID string + type AttemptNativeFacts struct + AcceptedAt time.Time + BindingVersion Decimal + CommandDigest string + RemovalEpoch Decimal + RequestDigest string + RequestID string + ResponseVersion Decimal + type AttemptReceipt struct + AttemptID id.ID + DescriptorDigest string + Generation Decimal + ProviderOperationID id.ID + Receipt Receipt + func (v *AttemptReceipt) UnmarshalJSON(raw []byte) error + func (v AttemptReceipt) MarshalJSON() ([]byte, error) + type AttemptRecord struct + Descriptor AttemptDescriptor + Receipt AttemptReceipt + State AttemptState + type AttemptRecoveryGrant struct + Command AttemptCommandRecord + NewlyAuthorized bool + Receipt AttemptReceipt + type AttemptRecoveryInvocation struct + Grant AttemptRecoveryGrant + type AttemptRecoveryRequest struct + CommandDigest string + Kind string + ReservationID id.ID + func (v *AttemptRecoveryRequest) UnmarshalJSON(raw []byte) error + func (v AttemptRecoveryRequest) MarshalJSON() ([]byte, error) + type AttemptRef = AttemptRootReference + type AttemptRequest struct + AttemptID id.ID + Generation Decimal + func (v *AttemptRequest) UnmarshalJSON(raw []byte) error + func (v AttemptRequest) MarshalJSON() ([]byte, error) + type AttemptRevocation struct + AttemptRef AttemptRef + CoverageDigest string + Disposition Disposition + LocalOperationID id.ID + ParentRevision Decimal + ProviderOperationID id.ID + RevokedAt time.Time + SchemaVersion Decimal + SettlementDigest string + type AttemptRootReference struct + AttemptID id.ID + DescriptorDigest string + Generation Decimal + type AttemptSettlement struct + AdmissionDigest string + AttemptRef AttemptRef + CoverageDigest string + Disposition Disposition + Evidence []byte + EvidenceDigest string + LocalOperationID id.ID + ProducerProfile string + ProviderOperationID id.ID + ResourcesDigest string + RevocationDigest string + SchemaVersion Decimal + SettledAt time.Time + StepReferences []string + VerifierID string + type AttemptSettlementReadRequest struct + NativeFenceDigest string + ProviderOperationID id.ID + type AttemptSettlementRequest struct + Disposition Disposition + Evidence []byte + ProducerProfile string + SettledAt time.Time + VerifierID string + func (v *AttemptSettlementRequest) UnmarshalJSON(raw []byte) error + func (v AttemptSettlementRequest) MarshalJSON() ([]byte, error) + type AttemptStartRequest struct + ActionID id.ID + AttemptID id.ID + ProviderOperationID id.ID + VerifierID string + func (v *AttemptStartRequest) UnmarshalJSON(raw []byte) error + func (v AttemptStartRequest) MarshalJSON() ([]byte, error) + type AttemptState struct + AdmissionDigest string + AttemptRef AttemptRef + BindingSlots []byte + ClosureDigest string + Phase string + ProviderIssuedAt *time.Time + ProviderSlots []byte + Revision Decimal + RevocationDigest string + SchemaVersion Decimal + SettlementDigest string + Successor *AttemptRef + TerminalDigest string + type AttemptTerminalRecord struct + CommandDigest string + DescriptorDigest string + FenceFactDigest string + Key AttemptBindingKey + LocalOperationID id.ID + ProofValidUntil time.Time + ProofVerifiedAt time.Time + SchemaVersion Decimal + SettlementWitnessDigest string + type AuditAcknowledgment struct + Intent AuditIntent + Receipt AuditSinkReceipt + type AuditActor struct + Subject string + Unauthenticated bool + type AuditDeliveryPort interface + Deliver func(ctx context.Context, request AuditIntent) (AuditSinkReceipt, error) + Recover func(ctx context.Context, request AuditIntent) (AuditSinkReceipt, error) + type AuditIntent struct + AcceptedAt time.Time + Action string + Actor AuditActor + ApplicationID string + Authority string + CorrelationID string + DecisionID string + ID id.ID + Installation string + MappingVersion Decimal + OccurredAt time.Time + OrganizationID string + Outcome string + Reason string + ResourceID string + ResourceKind string + Scope AuditScope + SelectorDigest string + SourceDigest string + SourceKey string + type AuditPage struct + Items []AuditIntent + NextCursor string + type AuditPageRequest struct + Authority string + Cursor string + Installation string + Limit int + Scope AuditScope + type AuditScope struct + DenialScope string + Kind string + TenantID string + type AuditSinkReceipt struct + AcceptedAt time.Time + ApplicationID string + Authority string + Installation string + IntentDigest string + IntentID id.ID + MappingVersion Decimal + NormalizedFingerprint string + OrganizationID string + Receipt []byte + SinkReceiptID string + SourceDigest string + SourceKey string + type Command struct + ID id.ID + LeaseEpoch uint64 + Owner string + Revision uint64 + type Continuation struct + Cursor string + InFlight *Key + Key ControllerKey + LeaseEpoch uint64 + LeaseOwner string + LeaseUntil time.Time + Pending []Key + Revision uint64 + type ContinuationAdvance struct + Cursor string + Duration time.Duration + ExpectedRevision uint64 + ID id.ID + InFlight *Key + Key ControllerKey + LeaseEpoch uint64 + Owner string + Pending []Key + type ContinuationAssociation struct + MaterialDigest string + MaterialID id.ID + Predecessor AttemptRef + ProviderOperationID id.ID + Successor AttemptRef + type ContinuationClosure struct + AcceptedAt time.Time + ActionID id.ID + CoverageDigest string + Disposition Disposition + Key Key + Lineage ContinuationLineage + MaterialDigest string + ParentRevision Decimal + PointerRevision Decimal + Predecessor AttemptRef + PredecessorRevision Decimal + ProviderOperationID id.ID + RevocationDigest string + SchemaVersion Decimal + SettlementDigest string + Successor AttemptRef + type ContinuationKey struct + ActionID id.ID + Key Key + type ContinuationLineage struct + FirstMaterialDigest string + FirstMaterialID id.ID + FirstSuccessor AttemptRef + OriginalOperationKey OperationKey + Root AttemptRef + RootInitialOperationID id.ID + SchemaVersion Decimal + type ContinuationMaterial struct + Digest string + Request ContinuationRequest + SchemaVersion Decimal + SuccessorGeneration Decimal + type ContinuationReceipt struct + ActionReceipt ActionReceipt + ProviderOperationID id.ID + Receipt Receipt + Successor AttemptRef + func (v *ContinuationReceipt) UnmarshalJSON(raw []byte) error + func (v ContinuationReceipt) MarshalJSON() ([]byte, error) + type ContinuationRecord struct + Closure ContinuationClosure + Material ContinuationMaterial + Receipt ContinuationReceipt + type ContinuationRequest struct + Action ActionSubmission + Predecessor AttemptRef + ProviderOperationID id.ID + SuccessorAttemptID id.ID + func (q *ContinuationRequest) UnmarshalJSON(raw []byte) error + func (q ContinuationRequest) MarshalJSON() ([]byte, error) + type ControllerConfig struct + Authority string + CallTimeout time.Duration + Installation string + PageSize int + RemoteCallBudget int + TargetBudget int + type ControllerKey struct + Authority string + Installation string + Name string + Scope AuditScope + type ControllerPageRequest struct + Cursor string + Limit int + type ControllerStore interface + AcceptManagedOriginalRegistration func(ctx context.Context, request OriginalRegistrationAcceptanceRequest) (Receipt, error) + AcceptManagedQuiescence func(ctx context.Context, request QuiescenceAcceptanceRequest) (Receipt, error) + AcknowledgeManagedAudit func(ctx context.Context, request AuditAcknowledgment) error + AdvanceManagedContinuation func(ctx context.Context, request ContinuationAdvance) (Continuation, error) + AdvanceManagedOperation func(ctx context.Context, request OperationAdvance) (OperationState, error) + AuthorizeManagedProviderStep func(ctx context.Context, request ProviderStepAuthorization) (ProviderStepGrant, error) + BindManagedRelease func(ctx context.Context, request ReleaseBindingRequest) (ReleaseBinding, error) + ListManagedAuditIntents func(ctx context.Context, request AuditPageRequest) (AuditPage, error) + ReadManagedContinuation func(ctx context.Context, request ControllerKey) (Continuation, error) + ReadManagedOperation func(ctx context.Context, request OperationKey) (OperationState, error) + ReadManagedOriginalLifecycle func(ctx context.Context, request OriginalLifecycleKey) (OriginalLifecycleRecord, error) + ReadManagedProviderStep func(ctx context.Context, request ProviderStepKey) (ProviderStepRecord, error) + ReadManagedQuiescence func(ctx context.Context, request QuiescenceKey) (QuiescenceRecord, error) + ReadManagedRelease func(ctx context.Context, request ReleaseKey) (ReleaseBinding, error) + RecordManagedAccessAudit func(ctx context.Context, request AccessAuditRequest) (AccessAuditReceipt, error) + RecordManagedOriginalDrain func(ctx context.Context, request OriginalDrainAcceptanceRequest) (Receipt, error) + RecordManagedProviderStepResult func(ctx context.Context, request ProviderStepResult) error + SubmitManagedAction func(ctx context.Context, request ActionSubmission) (ActionReceipt, error) + type Decimal string + func (d Decimal) Uint64() (uint64, error) + type Deletion struct + FenceDigest string + Issued bool + IssuedAt time.Time + OperationID id.ID + Settlement *Settlement + Verifier string + type DesiredMode string + const Active + const Paused + const Retiring + type DesiredRequest struct + Mode DesiredMode + type Disposition string + const Cancelled + const Fenced + const NoResourcesCreated + const NotIssued + const Rejected + const Removed + const SettledWithoutDeletion + type Drain struct + Complete bool + CompletedAt time.Time + Deadline time.Time + Evidence []byte + OperationID string + Quiescent bool + type DrainHandle struct + Deadline time.Time + HandleID string + HostID string + InstanceID string + OperationID string + Receipt []byte + ReceiptDigest string + RuntimeID string + type DrainObservationRequest struct + ChallengeID string + Drain DrainHandle + type DrainRequest struct + Drain Drain + type EffectiveProviderStep struct + ClosureDigest string + Disposition EffectiveStepDisposition + PermissionDigest string + SelectionDigest string + StepDigest string + TerminalDigest string + type EffectiveRemovalBinding struct + Binding RemovalRecoveryBinding + Proof RecoveryAssociation + type EffectiveRemovalCoverage struct + AdmissionDigest string + AttemptRef AttemptRef + BindingCount Decimal + BindingSetDigest string + Cutoff RecoveryAssociation + Disposition Disposition + Key AttemptKey + ProviderOperationID id.ID + ResourcesDigest string + Steps []EffectiveProviderStep + type EffectiveStepDisposition string + const EffectiveStepClosed + const EffectiveStepRemoved + const EffectiveStepUnissued + type Fence struct + CompatibilityEvidence []byte + Digest string + Epoch uint64 + Evidence []byte + Survivors []string + ValidUntil time.Time + type FenceRequest struct + Fence Fence + type Guard struct + func NewGuard(authority any) *Guard + func (g *Guard) CheckInstance(ctx context.Context, key Key, action string) error + func (g *Guard) CheckOwner(ctx context.Context, key OwnerKey, action string) error + func (g *Guard) CheckTenant(ctx context.Context, tenantID string) error + func (g *Guard) UsesAuthority(candidate any) bool + type GuardedOriginalMaterializationRequest struct + Command RecoveryCommand + PendingDigest string + Step ProviderStepKey + type GuardedOriginalPermission struct + Original ProviderEffectOriginal + PendingDigest string + type GuardedOriginalRequest struct + Command RecoveryCommand + Step ProviderStepKey + type HistoricalSettlement struct + Disposition Disposition + Physical Physical + Receipt WireReceipt + Request HistoricalSettlementRequest + Resources map[string]string + RevokedBeforeIssue bool + Settlement Settlement + Steps []WireProviderStepRecord + func (q HistoricalSettlement) Validate() error + type HistoricalSettlementReader interface + ReadManagedHistoricalSettlement func(ctx context.Context, request HistoricalSettlementRequest) (HistoricalSettlement, error) + type HistoricalSettlementRequest struct + AttemptGeneration Decimal + AttemptID id.ID + Authority string + FenceDigest string + Installation string + ManifestDigest string + ProviderOperationID id.ID + SchemaVersion Decimal + Seal Decimal + func (q HistoricalSettlementRequest) Validate() error + type Identity struct + Manifest Manifest + Physical Physical + ProvisionOperationID id.ID + type Key struct + InstanceID id.ID + TenantID string + type LeaseRequest struct + Duration time.Duration + type LifecycleAcceptance struct + AcceptedAt time.Time + Binding RoleBinding + Command PortCommand + Outcome PortOutcome + Receipt []byte + ReceiptDigest string + ReceiptID string + ReceiptVersion Decimal + func (q LifecycleAcceptance) Validate() error + type LifecycleObservation struct + ActiveClaims Decimal + AdmissionClosed bool + Binding RoleBinding + ChallengeID string + Complete bool + CompletedAt time.Time + Drain DrainHandle + Evidence []byte + ObservationID string + ObservedAt time.Time + Outcome PortOutcome + Quiescent bool + UnknownClaims Decimal + ValidUntil time.Time + VerifierID string + func (q LifecycleObservation) Validate() error + type LifecyclePort interface + AbortRemoval func(ctx context.Context, request RemovalBinding) (RemovalAcceptance, error) + BeginDrain func(ctx context.Context, request DrainObservationRequest) (LifecycleAcceptance, error) + FinishRemoval func(ctx context.Context, request RemovalBinding) (RemovalAcceptance, error) + Inspect func(ctx context.Context, request LifecycleRequest) (LifecycleObservation, error) + LookupRegistration func(ctx context.Context, request LifecycleRequest) (LifecycleAcceptance, error) + ObserveDrain func(ctx context.Context, request DrainObservationRequest) (LifecycleObservation, error) + PrepareRemoval func(ctx context.Context, request RemovalBinding) (RemovalAcceptance, error) + Register func(ctx context.Context, request LifecycleRequest) (LifecycleAcceptance, error) + VerifyFence func(ctx context.Context, request RemovalBinding) (RemovalAcceptance, error) + type LifecycleRequest struct + Binding RoleBinding + Command PortCommand + func (q LifecycleRequest) Validate() error + type MachineContextFactory interface + Context func(ctx context.Context, request MachineScope) (context.Context, error) + type MachineScope struct + Action string + Application string + Environment string + GlobalEnumeration bool + Installation string + ResourceID string + TenantID string + type ManagedPlan struct + ActionID id.ID + CreateProfile string + Identity WireIdentity + Provision ProvisionSpec + SchemaVersion Decimal + func (q ManagedPlan) Validate() error + type ManagedProvider interface + ExecuteProvision func(ctx context.Context, request ManagedPlan) (ProviderExecutionResult, error) + ExecuteRemoval func(ctx context.Context, request RemovalPlan) (ProviderExecutionResult, error) + InspectResources func(ctx context.Context, request ManagedPlan) (ResourceObservation, error) + SampleServices func(ctx context.Context, request ManagedPlan) ([]ServiceSample, error) + ValidatePlan func(ctx context.Context, request ManagedPlan) error + type ManagedSpec struct + Profile string + Provision json.RawMessage + RuntimeRoles []RuntimeRole + func ParseManagedSpec(m Manifest) (ManagedSpec, error) + type ManagedWriterFloorHistoryReader interface + ReadManagedWriterFloorActivation func(ctx context.Context, reference WriterFloorReference) (WriterFloor, error) + type ManagedWriterFloorReader interface + ReadManagedWriterFloor func(ctx context.Context) (WriterFloor, error) + type Manifest struct + Members []Member + Spec []byte + SpecDigest string + Version uint64 + type Member struct + ArtifactDigest string + Build string + ConfigurationDigest string + Installation string + Name string + Namespace string + OwnerID id.ID + Queue string + Service string + type OperationAdvance struct + ActionID id.ID + ExpectedOperationRevision uint64 + Observation OperationObservation + type OperationKey struct + ActionID id.ID + type OperationObservation struct + Command *PortCommand + Diagnostic string + Evidence []byte + Kind string + ObservedAt time.Time + RetryAt time.Time + type OperationState struct + ContinuationAssociation *ContinuationAssociation + Key OperationKey + Observation OperationObservation + Receipt ActionReceipt + RemovalAttemptRoot *AttemptRootReference + Revision uint64 + Submission ActionSubmission + type OriginalCommand struct + ID id.ID + LeaseEpoch Decimal + Owner string + ReservationID id.ID + Revision Decimal + func (c OriginalCommand) LocalCommand() (Command, error) + type OriginalDrainAcceptanceRequest struct + Command OriginalCommand + Facts OriginalDrainFacts + NativeReceipt []byte + NativeReceiptDigest string + type OriginalDrainFacts struct + AdmissionClosed bool + Deadline time.Time + Native OriginalNativeAcceptance + ObservedAt time.Time + OperationID string + Process OriginalProcessFacts + ProcessAccepted bool + type OriginalLifecycleKey struct + Kind string + OperationID id.ID + type OriginalLifecycleMaterial struct + Command OriginalCommand + Drain *OriginalDrainFacts + Kind string + NativeReceipt []byte + NativeReceiptDigest string + Registration *OriginalRegistrationFacts + TargetIdentityDigest string + func (m OriginalLifecycleMaterial) Normalize() (OriginalLifecycleMaterial, error) + type OriginalLifecycleRecord struct + Material OriginalLifecycleMaterial + Receipt OriginalLocalReceipt + Reference OriginalLifecycleReference + func ParseOriginalLifecycleRecord(raw []byte) (OriginalLifecycleRecord, error) + type OriginalLifecycleReference struct + FactsDigest string + Kind string + MaterialDigest string + NativeReceiptDigest string + OperationID id.ID + Schema string + TargetIdentityDigest string + func OriginalReference(m OriginalLifecycleMaterial) (OriginalLifecycleReference, error) + func ParseOriginalReference(raw []byte) (OriginalLifecycleReference, error) + func (r OriginalLifecycleReference) Bytes() ([]byte, error) + type OriginalLocalReceipt struct + AcceptedAt time.Time + Digest string + ID id.ID + LeaseEpoch Decimal + LeaseUntil time.Time + Revision Decimal + func OriginalReceipt(r Receipt) OriginalLocalReceipt + type OriginalNativeAcceptance struct + AcceptedAt time.Time + CommandDigest string + DeliveryID string + Operation string + RequestDigest string + RequestID string + ResponseVersion Decimal + type OriginalProcessFacts struct + ArtifactDigest string + Build string + ConfigurationDigest string + ConfigurationVersion string + Descriptor StartupBindingRef + EnrollmentEvidenceDigest string + HostID string + IdentityVersion Decimal + Installation string + InstanceID string + MaximumProofValidityNS Decimal + Namespace string + ProbePolicyID string + ProbePolicyVersion Decimal + ProducerVerifier string + Queue string + RuntimeID string + VerifierID string + type OriginalRegistrationAcceptanceRequest struct + Command OriginalCommand + Facts OriginalRegistrationFacts + NativeReceipt []byte + NativeReceiptDigest string + type OriginalRegistrationFacts struct + BindingState string + BindingVersion Decimal + ChangedAt time.Time + CreatedAt time.Time + Member string + Native OriginalNativeAcceptance + Process OriginalProcessFacts + RemovalEpoch Decimal + Role RuntimeRole + StoredCommandDigest string + type OriginalRemovalRecoveryPort interface + RecoverOriginalRemoval func(ctx context.Context, request AttemptRecoveryInvocation) (AttemptNativeAcceptance, error) + type OwnerKey struct + OwnerID id.ID + TenantID string + func (k OwnerKey) Validate() error + type OwnerProtectionStore interface + InspectManagedOwnerProtection func(ctx context.Context, key OwnerKey) (Protection, error) + type OwnerReservation struct + Origin Key + OwnerID id.ID + type Page struct + Items []Summary + NextCursor string + type PageRequest struct + Cursor string + Limit int + TenantID string + type Phase string + const Admitted + const DeleteIssued + const Deleted + const Open + const Sealed + type PhaseCommandGrant struct + NewlyRetained bool + Record PhaseCommandRecord + type PhaseCommandRecord struct + Acceptance OriginalLocalReceipt + AuditReceipt AccessAuditReceipt + Request PhaseCommandRequest + RequestDigest string + Schema string + Work WorkReference + func DecodePhaseCommandRecord(raw []byte) (PhaseCommandRecord, error) + type PhaseCommandRequest struct + ActionID id.ID + Audit AccessAuditRequest + Kind string + Parent PhaseParent + Process *ProcessPhaseCommand + Route *RoutingRequest + Schema string + func ClonePhaseCommandRequest(q PhaseCommandRequest) (PhaseCommandRequest, error) + type PhaseCommandStore interface + ReadManagedPhaseCommand func(ctx context.Context, reference WorkReference) (PhaseCommandRecord, error) + RetainManagedPhaseCommand func(ctx context.Context, request PhaseCommandRequest) (PhaseCommandGrant, error) + type PhaseNativeIdentity struct + CommandDigest string + Operation string + RequestDigest string + RequestID string + type PhaseOriginalResult struct + Acceptance OriginalLocalReceipt + AuditReceipt AccessAuditReceipt + Original OriginalLifecycleReference + OriginalReceipt OriginalLocalReceipt + Request PhaseOriginalResultRequest + Schema string + func DecodePhaseOriginalResult(raw []byte) (PhaseOriginalResult, error) + type PhaseOriginalResultRequest struct + Audit AccessAuditRequest + Original OriginalLifecycleKey + Parent PhaseParent + Schema string + Work WorkReference + func (q PhaseOriginalResultRequest) Validate() error + type PhaseOriginalResultStore interface + AttachManagedPhaseOriginalResult func(ctx context.Context, request PhaseOriginalResultRequest) (PhaseOriginalResult, error) + ReadManagedPhaseOriginalResult func(ctx context.Context, reference WorkReference) (PhaseOriginalResult, error) + type PhaseParent struct + ID id.ID + LeaseEpoch Decimal + Owner string + Revision Decimal + func (p PhaseParent) LocalCommand() (Command, error) + type Physical struct + Generation string + Placement string + Project string + Provider string + type PortCommand struct + Native []byte + NativeDigest string + OperationID id.ID + Original []byte + OriginalDigest string + RequestID string + SchemaVersion Decimal + func (c PortCommand) Validate() error + type PortOutcome string + const PortAbsent + const PortAccepted + const PortConflict + const PortDenied + const PortTerminal + const PortUnavailable + type Ports struct + Audit AuditDeliveryPort + Lifecycle LifecyclePort + Machine MachineContextFactory + Provider ManagedProvider + Routing RoutingPort + type ProcessPhaseCommand struct + Deadline time.Time + DrainOperation string + Native PhaseNativeIdentity + Process OriginalProcessFacts + Request LifecycleRequest + Scope MachineScope + type ProjectionReceipt struct + ActionID id.ID + OwnerID id.ID + ReleaseID id.ID + SpecDigest string + Stage ProjectionStage + Target Key + type ProjectionRequest struct + ActionID id.ID + Stage ProjectionStage + type ProjectionStage string + const ProjectionPending + type Protection struct + Phase Phase + Protected bool + Revision uint64 + func InspectOwnerTarget(t *Target, stored Key, owner OwnerKey) (Protection, error) + type ProtectionStore interface + HasManagedObligations func(ctx context.Context, request string) (bool, error) + InspectManagedProtection func(ctx context.Context, request Key) (Protection, error) + func RequireProtection(s any) (ProtectionStore, error) + type ProviderEffectBindingFacts struct + Attestation []byte + Command []byte + Original ProviderEffectOriginal + Producer RecoveryProducerIdentity + ProviderCommandDigest string + type ProviderEffectBindingHost struct + BackendAuthority string + Identity RecoveryProducerIdentity + Producer ProviderEffectBindingProducer + Provider string + Verifier ProviderEffectBindingVerifier + type ProviderEffectBindingKey struct + OriginalCommandID id.ID + Step ProviderStepKey + type ProviderEffectBindingProducer interface + RecoverProviderEffectBinding func(ctx context.Context, original ProviderEffectOriginal) (ProviderEffectBindingFacts, error) + type ProviderEffectBindingRecord struct + Acceptance RecoveryAcceptance + Digest string + Facts ProviderEffectBindingFacts + Kind string + RequestDigest string + SchemaVersion Decimal + func DecodeProviderEffectBinding(raw []byte) (ProviderEffectBindingRecord, error) + type ProviderEffectBindingRequest struct + Command Command + Original ProviderEffectBindingKey + type ProviderEffectBindingVerifier interface + VerifyProviderEffectBinding func(ctx context.Context, original ProviderEffectOriginal, ...) error + type ProviderEffectCommand struct + BackendAuthority string + Incarnation string + Method string + Options []ProviderEffectOption + Profile string + ResourceID string + ResourceKind string + SchemaVersion Decimal + func DecodeProviderEffectCommand(raw []byte) (ProviderEffectCommand, error) + type ProviderEffectOption struct + Name string + Value string + type ProviderEffectOriginal struct + AttemptRef AttemptRef + Key ProviderEffectBindingKey + Permission WireProviderStepPermission + Receipt WireReceipt + type ProviderExecutionAuthority interface + AuthorizeManagedProviderStep func(ctx context.Context, request ProviderStepAuthorization) (ProviderStepGrant, error) + ReadManagedProviderStep func(ctx context.Context, request ProviderStepKey) (ProviderStepRecord, error) + RecordManagedProviderStepResult func(ctx context.Context, request ProviderStepResult) error + type ProviderExecutionResult struct + OperationID id.ID + Outcome PortOutcome + Resources map[string]string + SchemaVersion Decimal + Settlement *Settlement + Steps []WireProviderStepRecord + func (q ProviderExecutionResult) Validate() error + type ProviderGuardedOriginalStore interface + MaterializeManagedGuardedOriginal func(ctx context.Context, request GuardedOriginalMaterializationRequest) (RecoveryAssociation, error) + PrepareManagedGuardedOriginal func(ctx context.Context, request GuardedOriginalRequest) (GuardedOriginalPermission, error) + type ProviderInvocationCloseRequest struct + Command RecoveryCommand + Failure ProviderInvocationFailure + type ProviderInvocationClosure struct + ClosedAt time.Time + FailureDigest string + Key ProviderInvocationKey + PermissionDigest string + ProducerProfile string + RootDigest string + VerifierID string + type ProviderInvocationClosureProducer interface + WitnessManagedProviderNoDispatch func(ctx context.Context, key ProviderInvocationKey) (ProviderInvocationFailure, error) + type ProviderInvocationCommitRequest struct + Command RecoveryCommand + ExpectedCurrentDigest string + Invocation ProviderInvocationKey + type ProviderInvocationCommitsStore interface + ReadManagedProviderInvocationCommits func(ctx context.Context, key ProviderInvocationKey) ([]RecoveryRecord[ProviderNativeCommitFacts], error) + type ProviderInvocationCurrentStore interface + ReadManagedProviderInvocationCurrent func(ctx context.Context, key ProviderInvocationKey) (ProviderStepRetryCurrent, error) + type ProviderInvocationFailure struct + Failure ProviderStepFailure + Key ProviderInvocationKey + PermissionDigest string + RootDigest string + type ProviderInvocationGrant struct + Marker RecoveryRecord[ProviderInvocationMarker] + MayDelegate bool + type ProviderInvocationKey struct + AttemptKey AttemptKey + CommandID id.ID + Step ProviderStepKey + type ProviderInvocationMarker struct + AcceptedAt time.Time + BindingCount Decimal + CurrentProofSetDigest string + Key ProviderInvocationKey + NativeCommitSetDigest string + PermissionDigest string + RootDigest string + SelectionDigest string + type ProviderInvocationObservationRequest struct + Command RecoveryCommand + ExpectedCurrentDigest string + Result ProviderInvocationResult + type ProviderInvocationPermission struct + Key ProviderInvocationKey + Ordinal Decimal + Permission WireProviderStepPermission + PermissionProofCount Decimal + PermissionProofSetDigest string + ProviderCommandDigest string + RootDigest string + type ProviderInvocationRecord struct + Authorization *RecoveryRecord[ProviderStepRetryAuthorization] + Closure *RecoveryRecord[ProviderInvocationClosure] + Failure *RecoveryRecord[ProviderInvocationFailure] + Marker *RecoveryRecord[ProviderInvocationMarker] + Permission RecoveryRecord[ProviderInvocationPermission] + Result *RecoveryRecord[ProviderInvocationResult] + type ProviderInvocationResult struct + Key ProviderInvocationKey + PermissionDigest string + Result WireProviderStepResult + RootDigest string + type ProviderInvocationSources struct + PermissionProofs []RecoveryRecord[ProviderPermissionProof] + Root RecoveryRecord[ProviderStepRetryRoot] + type ProviderInvocationSourcesStore interface + ReadManagedProviderInvocationSources func(ctx context.Context, key ProviderInvocationKey) (ProviderInvocationSources, error) + type ProviderInvocationStore interface + CloseManagedProviderInvocation func(ctx context.Context, request ProviderInvocationCloseRequest) (RecoveryRecord[ProviderInvocationClosure], error) + CommitManagedProviderInvocation func(ctx context.Context, request ProviderInvocationCommitRequest) (ProviderInvocationGrant, error) + ReadManagedProviderInvocation func(ctx context.Context, key ProviderInvocationKey) (ProviderInvocationRecord, error) + ReadManagedProviderNativeCommit func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[ProviderNativeCommitFacts], error) + RecordManagedProviderInvocationResult func(ctx context.Context, result ProviderInvocationObservationRequest) error + RecordManagedProviderNativeCommit func(ctx context.Context, request ProviderNativeCommitRequest) (RecoveryRecord[ProviderNativeCommitFacts], error) + type ProviderNativeCommitFacts struct + Binding RemovalRecoveryBinding + CurrentProof RecoveryAssociation + CurrentProofDigest string + Export RecoveryNativeExport + GuardID string + GuardRootDigest string + Intent RecoveryAssociation + Invocation ProviderInvocationKey + NativeAcceptedAt time.Time + NativeReceiptDigest string + NativeRequestDigest string + NativeRequestID string + PermissionDigest string + PermissionProof RecoveryAssociation + PermissionProofDigest string + type ProviderNativeCommitRequest struct + Command RecoveryCommand + Facts ProviderNativeCommitFacts + type ProviderPermissionProof struct + BindingDigest string + Invocation ProviderInvocationKey + NativeMaterialDigest string + PermissionDigest string + Proof RecoveryAssociation + type ProviderStepAcceptance struct + Permission ProviderStepPermission + Receipt Receipt + type ProviderStepAcceptanceStore interface + ReadManagedProviderStepAcceptance func(ctx context.Context, request ProviderStepAuthorization) (ProviderStepAcceptance, error) + type ProviderStepAuthorization struct + Step ProviderStepKey + type ProviderStepFailure struct + AttemptRef AttemptRef + Class string + InvocationID id.ID + ObservedAt time.Time + Permission ProviderStepPermission + Phase string + ProducerProfile string + Reason string + SchemaVersion Decimal + VerifierID string + Witness []byte + WitnessDigest string + func (v *ProviderStepFailure) UnmarshalJSON(raw []byte) error + func (v ProviderStepFailure) MarshalJSON() ([]byte, error) + type ProviderStepFailureAuthority interface + ReadManagedProviderStepFailure func(ctx context.Context, request ProviderStepKey) (ProviderStepFailure, error) + RecordManagedProviderStepFailure func(ctx context.Context, request ProviderStepFailure) error + type ProviderStepGrant struct + NewlyIssued bool + Permission ProviderStepPermission + type ProviderStepKey struct + Kind ProviderStepKind + ProviderOperationID id.ID + Service string + type ProviderStepKind string + const StepCreateContainer + const StepCreateNetwork + const StepRemoveContainer + const StepRemoveNetwork + const StepStartContainer + type ProviderStepPermission struct + CommandID id.ID + CreateProfile string + Digest string + FenceDigest string + IssuedAt time.Time + Physical Physical + ResourceID string + Revision uint64 + Seal uint64 + SpecDigest string + Step ProviderStepKey + type ProviderStepRecord struct + Permission ProviderStepPermission + Result *ProviderStepResult + type ProviderStepResult struct + Diagnostic string + Evidence []byte + ObservedAt time.Time + Outcome PortOutcome + Permission ProviderStepPermission + ResourceID string + type ProviderStepRetryAuthorization struct + AttemptRevision Decimal + AuthorizedAt time.Time + ExpectedCurrentDigest string + Key ProviderInvocationKey + Ordinal Decimal + ParentRevision Decimal + Permission RecoveryAssociation + Previous ProviderStepRetryPrevious + RootDigest string + type ProviderStepRetryCurrent struct + Authority RecoveryAssociation + ClosureKey string + CommandID id.ID + Digest string + FailureKey string + MarkerKey string + Ordinal Decimal + Permission RecoveryAssociation + PreviousDigest string + ResultKey string + RootDigest string + SchemaVersion Decimal + type ProviderStepRetryPrevious struct + Authority RecoveryAssociation + Closure RecoveryAssociation + CommandID id.ID + Digest string + Failure RecoveryAssociation + Ordinal Decimal + PermissionDigest string + RootDigest string + SchemaVersion Decimal + type ProviderStepRetryRequest struct + Command RecoveryCommand + CommandID id.ID + ExpectedCurrentDigest string + Step ProviderStepKey + type ProviderStepRetryRoot struct + AttemptRef AttemptRef + Incarnation string + OriginalPermission WireProviderStepPermission + OriginalPermissionReceipt WireReceipt + Profile string + ProviderCommandDigest string + ResourceID string + SpecDigest string + Step ProviderStepKey + type ProviderStepRetryStore interface + AuthorizeManagedProviderStepRetry func(ctx context.Context, request ProviderStepRetryRequest) (RecoveryRecord[ProviderStepRetryAuthorization], error) + ReadManagedEffectiveRemovalCoverage func(ctx context.Context, key AttemptKey) (RecoveryRecord[EffectiveRemovalCoverage], error) + ReadManagedProviderStepRetry func(ctx context.Context, key ProviderInvocationKey) (RecoveryRecord[ProviderStepRetryAuthorization], error) + type Provision struct + Complete bool + Issued bool + Receipt []byte + Revoked bool + type ProvisionService struct + CPUMillis Decimal + Image string + MemoryMiB Decimal + Name string + PIDLimit Decimal + Role string + Startup StartupBindingRef + type ProvisionSpec struct + Services []ProvisionService + Version Decimal + func ParseProvisionSpec(m Manifest) (ProvisionSpec, error) + type QuiescenceAcceptanceRequest struct + Command OriginalCommand + Observation QuiescenceObservation + type QuiescenceBatchAcceptanceRequest struct + Attempt AttemptRef + Command QuiescenceBatchCommand + Entries []QuiescenceBatchEntry + Schema string + func ParseQuiescenceBatchAcceptanceRequest(raw []byte) (QuiescenceBatchAcceptanceRequest, error) + func (q QuiescenceBatchAcceptanceRequest) Bytes() ([]byte, error) + func (q QuiescenceBatchAcceptanceRequest) Normalize() (QuiescenceBatchAcceptanceRequest, error) + type QuiescenceBatchCommand struct + ID id.ID + Key Key + LeaseEpoch Decimal + Owner string + Revision Decimal + type QuiescenceBatchEntry struct + Observation QuiescenceObservation + OperationID id.ID + type QuiescenceBatchKey struct + BatchID id.ID + Key Key + type QuiescenceBatchReceipt struct + Attempt AttemptRef + BatchID id.ID + Count Decimal + Key Key + Receipt OriginalLocalReceipt + Schema string + func ParseQuiescenceBatchReceipt(raw []byte) (QuiescenceBatchReceipt, error) + func (q QuiescenceBatchReceipt) Bytes() ([]byte, error) + type QuiescenceBatchStore interface + AcceptManagedQuiescenceBatch func(ctx context.Context, request QuiescenceBatchAcceptanceRequest) (QuiescenceBatchReceipt, error) + ReadManagedQuiescenceBatch func(ctx context.Context, key QuiescenceBatchKey) (QuiescenceBatchReceipt, error) + type QuiescenceIndex struct + ObservedAt time.Time + OperationID id.ID + RecordDigest string + ReservationID id.ID + Schema string + func ParseQuiescenceIndex(raw []byte) (QuiescenceIndex, error) + func (i QuiescenceIndex) Bytes() ([]byte, error) + type QuiescenceKey struct + OperationID id.ID + ReservationID id.ID + type QuiescenceLeaf struct + ActiveClaims Decimal + AdmissionClosed bool + ChallengeID string + Complete bool + DeadlineExpired bool + ErrorClass string + ObservationID string + ObservedAt time.Time + Quiescent bool + Reference QuiescenceReference + UnknownClaims Decimal + ValidUntil time.Time + VerifierID string + type QuiescenceObservation struct + Attestation []byte + ChallengeDigest string + func (o QuiescenceObservation) Normalize() (QuiescenceObservation, error) + type QuiescenceObservationPort interface + ObserveQuiescence func(ctx context.Context, request QuiescenceObservationRequest) (QuiescenceObservation, error) + type QuiescenceObservationRequest struct + ChallengeID string + Reference QuiescenceReference + type QuiescenceRecord struct + Receipt OriginalLocalReceipt + Request QuiescenceAcceptanceRequest + VerifiedAt time.Time + func ParseQuiescenceRecord(raw []byte) (QuiescenceRecord, error) + func (r QuiescenceRecord) Bytes() ([]byte, error) + type QuiescenceReference struct + Deadline time.Time + DrainMaterialDigest string + DrainOperationID id.ID + DrainReferenceDigest string + HandleDigest string + Member string + OperationID string + Process OriginalProcessFacts + RegistrationMaterialDigest string + RegistrationOperationID id.ID + RegistrationReferenceDigest string + ReservationID id.ID + Role RuntimeRole + Schema string + TargetIdentityDigest string + func NewQuiescenceReference(registration, drain OriginalLifecycleRecord) (QuiescenceReference, error) + type Receipt struct + AcceptedAt time.Time + Digest string + ID id.ID + LeaseEpoch uint64 + LeaseUntil time.Time + Revision uint64 + type RecoveryAcceptance struct + OperationID id.ID + Receipt WireReceipt + RequestDigest string + type RecoveryAssociation struct + Digest string + Key string + Kind RecoveryRecordKind + OperationID id.ID + ReceiptDigest string + func RecoveryAssociationFor[T any](key string, record RecoveryRecord[T]) (RecoveryAssociation, error) + func RecoveryRecordAssociation[T any](key AttemptKey, record RecoveryRecord[T]) (RecoveryAssociation, error) + type RecoveryCommand struct + AttemptRef AttemptRef + ID id.ID + Key Key + LeaseEpoch Decimal + Owner string + Profile string + Revision Decimal + func (command RecoveryCommand) LocalCommand() (Command, error) + type RecoveryEffectComplete struct + Incarnation string + Invocation ProviderInvocationKey + OriginalPreEffect *RecoveryOriginalPreEffect + OriginalProcessDigest string + PermissionDigest string + PreEffectProofDigest string + ResourceID string + Result RecoveryAssociation + RetryPreEffect *RecoveryAssociation + type RecoveryExactRequest struct + Association RecoveryAssociation + Key AttemptKey + type RecoveryNativeCloseFacts struct + Binding RemovalRecoveryBinding + Coverage RecoveryAssociation + Cutoff RecoveryAssociation + Export RecoveryNativeExport + GuardID string + GuardRootDigest string + Intent RecoveryAssociation + NativeAcceptedAt time.Time + NativeReceiptDigest string + NativeRequestDigest string + NativeRequestID string + type RecoveryNativeCloseRequest struct + Command RecoveryCommand + Facts RecoveryNativeCloseFacts + type RecoveryNativeExport struct + Attestation []byte + AttestationDigest string + ProducerID string + ProducerProfile string + ProducerVersion Decimal + Raw []byte + RawDigest string + VerifierID string + type RecoveryNativeIntent struct + Binding RemovalRecoveryBinding + Command []byte + CommandDigest string + Coverage *RecoveryAssociation + Cutoff *RecoveryAssociation + Operation string + Permission *RecoveryAssociation + Profile string + Proof *RecoveryAssociation + RequestDigest string + RequestID string + type RecoveryNativeIntentRequest struct + Command RecoveryCommand + Intent RecoveryNativeIntent + type RecoveryOriginalPreEffect struct + FactDigest string + Key AttemptBindingKey + OperationID id.ID + type RecoveryProducerContext struct + Intent RecoveryRecord[RecoveryNativeIntent] + Key AttemptKey + Profile string + type RecoveryProducerIdentity struct + ProducerID string + Profile string + VerifierID string + Version Decimal + type RecoveryRecord struct + Acceptance RecoveryAcceptance + Digest string + Facts T + Kind RecoveryRecordKind + SchemaVersion Decimal + func DecodeRecoveryRecord[T any](raw []byte) (RecoveryRecord[T], error) + type RecoveryRecordKind string + const RecoveryActivationRecord + const RecoveryAuthorizationRecord + const RecoveryCloseRecord + const RecoveryClosureRecord + const RecoveryCommitRecord + const RecoveryCoverageBindingRecord + const RecoveryCoverageRecord + const RecoveryCutoffRecord + const RecoveryFailureRecord + const RecoveryIntentRecord + const RecoveryMarkerRecord + const RecoveryPermissionProofRecord + const RecoveryPermissionRecord + const RecoveryProofRecord + const RecoveryResultRecord + const RecoveryRootRecord + type RefusalError struct + Action string + Cause error + Operation string + func (r *RefusalError) Error() string + func (r *RefusalError) Unwrap() error + type Registration struct + Command []byte + CommandDigest string + HostID string + ID id.ID + InstanceID string + Member string + RequestID string + RuntimeID string + type ReleaseBinding struct + AcceptedAt time.Time + ActionID id.ID + Key ReleaseKey + Manifest Manifest + Target Key + Version uint64 + type ReleaseBindingRequest struct + ActionID id.ID + ReleaseID id.ID + type ReleaseKey struct + ReleaseID id.ID + TenantID string + type RemovalAcceptance struct + AcceptedAt time.Time + Binding RemovalBinding + OriginalBindingProof []byte + Outcome PortOutcome + Receipt []byte + ReceiptDigest string + ReceiptID string + func (q RemovalAcceptance) Validate() error + type RemovalAttemptStore interface + AdmitManagedRemovalAttempt func(ctx context.Context, request AttemptAdmissionRequest) (Receipt, error) + AuthorizeManagedAttemptCommand func(ctx context.Context, request AttemptCommandRequest) (AttemptCommandGrant, error) + AuthorizeManagedAttemptRecovery func(ctx context.Context, request AttemptRecoveryRequest) (AttemptRecoveryGrant, error) + BeginManagedRemovalAttempt func(ctx context.Context, request AttemptStartRequest) (AttemptReceipt, error) + ReadManagedAttemptBinding func(ctx context.Context, request AttemptBindingKey) (AttemptBindingRecord, error) + ReadManagedAttemptCommand func(ctx context.Context, request AttemptCommandKey) (AttemptCommandRecord, error) + ReadManagedAttemptHistoricalSettlement func(ctx context.Context, request AttemptSettlementReadRequest) (AttemptHistoricalSettlement, error) + ReadManagedRemovalAttempt func(ctx context.Context, request AttemptKey) (AttemptRecord, error) + RecordManagedAttemptAbort func(ctx context.Context, request AttemptAbortRequest) (Receipt, error) + RecordManagedAttemptBindingSettlement func(ctx context.Context, request AttemptBindingSettlementRequest) (Receipt, error) + RecordManagedAttemptFence func(ctx context.Context, request AttemptFenceRequest) (Receipt, error) + RecordManagedAttemptFinish func(ctx context.Context, request AttemptFinishRequest) (Receipt, error) + RevokeManagedRemovalAttempt func(ctx context.Context, request AttemptRequest) (Receipt, error) + SettleManagedRemovalAttempt func(ctx context.Context, request AttemptSettlementRequest) (Receipt, error) + TombstoneManagedRemovalAttempt func(ctx context.Context, request AttemptRequest) (Receipt, error) + type RemovalBinding struct + AttemptGeneration Decimal + AttemptID id.ID + Fence WireFence + ProviderOperationID id.ID + Seal Decimal + SurvivorProof []byte + func (q RemovalBinding) Validate() error + type RemovalCommitProducer interface + BindManagedRemovalCommit func(ctx context.Context, producer RecoveryProducerContext) (ProviderNativeCommitFacts, error) + CheckManagedRemovalCommit func(ctx context.Context, producer RecoveryProducerContext) (ProviderNativeCommitFacts, error) + RecoverManagedRemovalCommit func(ctx context.Context, producer RecoveryProducerContext) (ProviderNativeCommitFacts, error) + type RemovalContinuationStore interface + BeginManagedRemovalContinuation func(ctx context.Context, request ContinuationRequest) (ContinuationReceipt, error) + ReadManagedRemovalContinuation func(ctx context.Context, key ContinuationKey) (ContinuationRecord, error) + type RemovalCoverageSealer interface + SealManagedEffectiveRemovalCoverage func(ctx context.Context, command RecoveryCommand) (RecoveryRecord[EffectiveRemovalCoverage], error) + type RemovalCutoffFacts struct + AttemptRef AttemptRef + CutoffAt time.Time + Key AttemptKey + ProviderOperationID id.ID + RevocationDigest string + RevocationReceipt WireReceipt + type RemovalCutoffReader interface + ReadManagedRemovalCutoffExact func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[RemovalCutoffFacts], error) + type RemovalGuardCloseProducer interface + CloseManagedRemovalGuard func(ctx context.Context, producer RecoveryProducerContext) (RecoveryNativeCloseFacts, error) + RecoverManagedRemovalGuardClose func(ctx context.Context, producer RecoveryProducerContext) (RecoveryNativeCloseFacts, error) + type RemovalPlan struct + ActionID id.ID + AttemptGeneration Decimal + AttemptID id.ID + FenceDigest string + Identity WireIdentity + ProviderOperationID id.ID + Resources map[string]string + SchemaVersion Decimal + func (q RemovalPlan) Validate() error + type RemovalRecoveryActivation struct + ActivatedAt time.Time + AdmissionDigest string + AttemptRef AttemptRef + BindingCount Decimal + Key AttemptKey + OriginalSelectionDigest string + Profile string + ProviderOperationID id.ID + RetryProfile string + StepCount Decimal + type RemovalRecoveryActivationRequest struct + Command RecoveryCommand + type RemovalRecoveryBinding struct + AdmissionDigest string + DescriptorDigest string + Key AttemptBindingKey + NativeFenceDigest string + OriginalBeginRequestDigest string + OriginalBeginRequestID string + OriginalCommandDigest string + OriginalDrainDigest string + OriginalProcessDigest string + OriginalRegistrationDigest string + ProviderOperationID id.ID + type RemovalRecoveryHost struct + Close RemovalGuardCloseProducer + CloseIdentity RecoveryProducerIdentity + Closure ProviderInvocationClosureProducer + ClosureVerifierID string + Commit RemovalCommitProducer + CommitIdentity RecoveryProducerIdentity + Revalidation RemovalRevalidationProducer + RevalidationIdentity RecoveryProducerIdentity + Verifier RemovalRecoveryVerifier + type RemovalRecoveryLifecycleStore interface + ReadManagedEffectiveRemovalCoverageExact func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[EffectiveRemovalCoverage], error) + RecordManagedRemovalRecoveryAbort func(ctx context.Context, request AttemptAbortRequest) (Receipt, error) + RecordManagedRemovalRecoveryBindingSettlement func(ctx context.Context, request AttemptBindingSettlementRequest) (Receipt, error) + RecordManagedRemovalRecoveryCommand func(ctx context.Context, request AttemptCommandRequest) (AttemptCommandGrant, error) + RecordManagedRemovalRecoveryFinish func(ctx context.Context, request AttemptFinishRequest) (Receipt, error) + SettleManagedRemovalRecovery func(ctx context.Context, request AttemptSettlementRequest) (Receipt, error) + TombstoneManagedRemovalRecovery func(ctx context.Context, request AttemptRequest) (Receipt, error) + func RequireRemovalRecoveryLifecycle(authority any) (RemovalRecoveryLifecycleStore, error) + type RemovalRecoveryVerifier interface + VerifyProviderNoDispatch func(ctx context.Context, permission RecoveryRecord[ProviderInvocationPermission], ...) error + VerifyRemovalClose func(ctx context.Context, intent RecoveryRecord[RecoveryNativeIntent], ...) error + VerifyRemovalCommit func(ctx context.Context, intent RecoveryRecord[RecoveryNativeIntent], ...) error + VerifyRemovalRevalidation func(ctx context.Context, intent RecoveryRecord[RecoveryNativeIntent], ...) error + type RemovalRevalidationCurrent struct + BindingDigest string + Digest string + Proof RecoveryAssociation + SchemaVersion Decimal + SourceObservedAt time.Time + type RemovalRevalidationFacts struct + Binding RemovalRecoveryBinding + BuildDigest string + CandidateDigest string + CandidateVersion Decimal + CoverageDigest string + EffectComplete *RecoveryEffectComplete + ExclusionDigest string + Export RecoveryNativeExport + GuardID string + GuardRootDigest string + Intent RecoveryAssociation + NativeAcceptedAt time.Time + NativeCurrentDigest string + NativeMaterialDigest string + NativeReceiptDigest string + NativeRequestDigest string + NativeRequestID string + NativeScopeDigest string + ProcessDisposition string + RemovalEpoch Decimal + SourceObservedAt time.Time + SurvivorDigest string + ValidUntil time.Time + type RemovalRevalidationProducer interface + RecoverManagedRemovalRevalidation func(ctx context.Context, producer RecoveryProducerContext) (RemovalRevalidationFacts, error) + RevalidateManagedRemoval func(ctx context.Context, producer RecoveryProducerContext) (RemovalRevalidationFacts, error) + type RemovalRevalidationRequest struct + Command RecoveryCommand + ExpectedCurrentDigest string + Facts RemovalRevalidationFacts + type RemovalRevalidationSet struct + AttemptRef AttemptRef + Current []RemovalRevalidationCurrent + Proofs []RecoveryRecord[RemovalRevalidationFacts] + type RemovalRevalidationStore interface + AcceptManagedRemovalRevalidation func(ctx context.Context, request RemovalRevalidationRequest) (RecoveryRecord[RemovalRevalidationFacts], error) + ActivateManagedRemovalRecovery func(ctx context.Context, request RemovalRecoveryActivationRequest) (RecoveryRecord[RemovalRecoveryActivation], error) + CutoffManagedRemovalRecovery func(ctx context.Context, command RecoveryCommand) (RecoveryRecord[RemovalCutoffFacts], error) + ReadManagedRecoveryNativeIntent func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[RecoveryNativeIntent], error) + ReadManagedRemovalGuardClose func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[RecoveryNativeCloseFacts], error) + ReadManagedRemovalRevalidation func(ctx context.Context, request RecoveryExactRequest) (RecoveryRecord[RemovalRevalidationFacts], error) + ReadManagedRemovalRevalidationSet func(ctx context.Context, key AttemptKey) (RemovalRevalidationSet, error) + RecordManagedRecoveryNativeIntent func(ctx context.Context, request RecoveryNativeIntentRequest) (RecoveryRecord[RecoveryNativeIntent], error) + RecordManagedRemovalGuardClose func(ctx context.Context, request RecoveryNativeCloseRequest) (RecoveryRecord[RecoveryNativeCloseFacts], error) + type ReplacementRequest struct + Replacement Identity + type Reservation struct + Abort *AbortProof + Drain *Drain + Fence *Fence + Finished []byte + Phase ReservationPhase + Receipt []byte + Unknown bool + type ReservationPhase string + const Accepted + const MayHaveIssued + const Reserved + const Revoked + type ReservationRequest struct + ReservationID id.ID + type ReserveRequest struct + Registration Registration + type ResourceObservation struct + Identity WireIdentity + ObservedAt time.Time + Outcome PortOutcome + Resources map[string]string + SchemaVersion Decimal + func (q ResourceObservation) Validate() error + type ResourcesRequest struct + OperationID id.ID + Receipt []byte + Resources map[string]string + type RoleBinding struct + ConfigurationDigest string + EnrollmentEvidence []byte + HostID string + InstanceID string + MemberIndex Decimal + MemberName string + NativeBuild string + ReservationID id.ID + ReservationVersion Decimal + Role RuntimeRole + RuntimeID string + Target WireIdentity + func (b RoleBinding) Validate() error + type RootDispatchReservation struct + DispatchCommand PortCommand + MayHaveForwarded bool + OriginalCommand PortCommand + Route RouteIdentity + RouteRevision Decimal + type RouteIdentity struct + ArtifactDigest string + Build string + ConfigurationDigest string + Installation string + ManifestDigest string + Namespace string + Queue string + ReleaseID id.ID + Route string + SchemaFloor Decimal + WriterFloor Decimal + type RoutingPort interface + CheckCompatibility func(ctx context.Context, request RoutingRequest) (RoutingReceipt, error) + LookupRouting func(ctx context.Context, request RoutingRequest) (RoutingReceipt, error) + SetActiveBuild func(ctx context.Context, request RoutingRequest) (RoutingReceipt, error) + type RoutingReceipt struct + AcceptedAt time.Time + AuditID string + Outcome PortOutcome + Receipt []byte + ReceiptID string + Request RoutingRequest + Revision Decimal + func (q RoutingReceipt) Validate() error + type RoutingRequest struct + Command PortCommand + Compatibility []byte + ExpectedRevision Decimal + Readiness []byte + Route RouteIdentity + func (q RoutingRequest) Validate() error + type RuntimeRole string + const Polling + const RetainedQuery + type ServiceSample struct + CPUTimeNanos Decimal + MemoryBytes Decimal + ObservedAt time.Time + Outcome PortOutcome + PIDCount Decimal + ResourceID string + Service string + type Settlement struct + Disposition Disposition + Evidence []byte + FenceDigest string + OperationID id.ID + SettledAt time.Time + Verifier string + type SettlementRequest struct + Settlement Settlement + type StartupBindingRef struct + BindingDigest string + BindingGeneration Decimal + BindingID string + type Store interface + AbortManagedBinding func(ctx context.Context, request AbortRequest) (Receipt, error) + AcceptManagedRegistration func(ctx context.Context, request AcceptanceRequest) (Receipt, error) + AdmitManagedRemoval func(ctx context.Context, request AdmissionRequest) (Receipt, error) + AllocateManagedReplacement func(ctx context.Context, request ReplacementRequest) (Receipt, error) + BindManagedResources func(ctx context.Context, request ResourcesRequest) (Receipt, error) + ClaimManagedLease func(ctx context.Context, request LeaseRequest) (Receipt, error) + CreateManagedTarget func(ctx context.Context, request Identity) (*Target, error) + FinishManagedBinding func(ctx context.Context, request AcceptanceRequest) (Receipt, error) + IssueManagedDeletion func(ctx context.Context, request Command) (Receipt, error) + IssueManagedProvision func(ctx context.Context, request Command) (Receipt, error) + IssueManagedRegistration func(ctx context.Context, request ReservationRequest) (Receipt, error) + ListManagedControllerTargets func(ctx context.Context, request ControllerPageRequest) (Page, error) + ListManagedTargets func(ctx context.Context, request PageRequest) (Page, error) + ObserveManagedUnknown func(ctx context.Context, request ReservationRequest) (Receipt, error) + ReadManagedTarget func(ctx context.Context, request Key) (*Target, error) + RecordManagedDrain func(ctx context.Context, request DrainRequest) (Receipt, error) + RecordManagedFence func(ctx context.Context, request FenceRequest) (Receipt, error) + ReserveManagedRegistration func(ctx context.Context, request ReserveRequest) (Receipt, error) + RevokeManagedDeletion func(ctx context.Context, request Command) (Receipt, error) + SealManagedTarget func(ctx context.Context, request Command) (Receipt, error) + SetManagedDesired func(ctx context.Context, request DesiredRequest) (Receipt, error) + SettleManagedDeletion func(ctx context.Context, request SettlementRequest) (Receipt, error) + TombstoneManagedTarget func(ctx context.Context, request Command) (Receipt, error) + TombstoneManagedUnissuedTarget func(ctx context.Context, request Command) (Receipt, error) + type Summary struct + Desired DesiredMode + Phase Phase + ReservationCount int + Revision uint64 + type Target struct + CreatedAt time.Time + Deletion *Deletion + Desired DesiredMode + DesiredRevision uint64 + LeaseEpoch uint64 + LeaseOwner string + LeaseUntil time.Time + Phase Phase + Provision Provision + Replacement *Identity + ReplacementOperationID id.ID + Reservations []Reservation + Resources map[string]string + Revision uint64 + Seal uint64 + TerminalDisposition Disposition + type WireFence struct + CompatibilityEvidence []byte + Digest string + Epoch Decimal + Evidence []byte + Survivors []string + ValidUntil time.Time + func FenceWire(v Fence) WireFence + func (w WireFence) Value() (Fence, error) + type WireIdentity struct + Manifest WireManifest + Physical Physical + ProvisionOperationID id.ID + func IdentityWire(v Identity) WireIdentity + func (w WireIdentity) Value() (Identity, error) + type WireManifest struct + Members []Member + Spec []byte + SpecDigest string + Version Decimal + type WireProviderStepPermission struct + CommandID id.ID + CreateProfile string + Digest string + FenceDigest string + IssuedAt time.Time + Physical Physical + ResourceID string + Revision Decimal + Seal Decimal + SpecDigest string + Step ProviderStepKey + func ProviderPermissionWire(v ProviderStepPermission) WireProviderStepPermission + func (w WireProviderStepPermission) Value() (ProviderStepPermission, error) + type WireProviderStepRecord struct + Permission WireProviderStepPermission + Result *WireProviderStepResult + func ProviderStepWire(v ProviderStepRecord) WireProviderStepRecord + func (w WireProviderStepRecord) Value() (ProviderStepRecord, error) + type WireProviderStepResult struct + Diagnostic string + Evidence []byte + ObservedAt time.Time + Outcome PortOutcome + Permission WireProviderStepPermission + ResourceID string + type WireReceipt struct + AcceptedAt time.Time + Digest string + ID id.ID + LeaseEpoch Decimal + LeaseUntil time.Time + Revision Decimal + func ReceiptWire(v Receipt) WireReceipt + func (w WireReceipt) Value() (Receipt, error) + type WorkDiscoveryStore interface + ListManagedUnresolvedWork func(ctx context.Context, request WorkPageRequest) (WorkPage, error) + ReadManagedWork func(ctx context.Context, reference WorkReference) (WorkReference, error) + ReadManagedWorkHead func(ctx context.Context, key Key) (WorkHead, error) + type WorkHead struct + Desired WorkReference + Key Key + LastOrdinal Decimal + Provisioning WorkReference + Schema string + func DecodeWorkHead(raw []byte) (WorkHead, error) + type WorkPage struct + Items []WorkReference + Key Key + NextCursor string + Schema string + type WorkPageRequest struct + Cursor string + Key Key + Limit int + type WorkReference struct + Digest string + ID id.ID + Key Key + Kind string + Operation OperationKey + Ordinal Decimal + Schema string + func DecodeWorkReference(raw []byte) (WorkReference, error) + func (r WorkReference) Validate() error + type WriterFloor struct + ActivatedAt time.Time + ActivationDigest string + ActivationID id.ID + AuthorityID string + Digest string + Epoch Decimal + MinimumProtocol Decimal + PreviousDigest string + Schema string + func DecodeWriterFloor(raw []byte) (WriterFloor, error) + func NewWriterFloor(request WriterFloorActivation, now time.Time) (WriterFloor, error) + func (floor WriterFloor) Activation() WriterFloorActivation + func (floor WriterFloor) Reference() WriterFloorReference + type WriterFloorActivation struct + ActivationID id.ID + AuthorityID string + Epoch Decimal + ExpectedDigest string + MinimumProtocol Decimal + Schema string + func DecodeWriterFloorActivation(raw []byte) (WriterFloorActivation, error) + type WriterFloorReference struct + ActivationID id.ID + AuthorityID string + Digest string