Enum Record 

pub enum Record {
    Prepared(Box<Transaction>),
    Advance {
        txn: TxnId,
        epoch: u64,
        to: TxnState,
        note: String,
        withdrawn_for: Option<TxnId>,
    },
    Takeover {
        txn: TxnId,
        from_epoch: u64,
        lease: Lease,
    },
    Renew {
        txn: TxnId,
        epoch: u64,
        worker_pid: Option<u32>,
        boot_at: Timestamp,
    },
    OpBegin {
        op: OpId,
        call: String,
    },
    OpAck {
        op: OpId,
        outcome: Outcome,
    },
    OverrideSet(Override),
    OverrideLifted(UnitId),
    Incident(Incident),
    KnownGood(GenerationId),
    LiveTested(Option<GenerationId>),
    AcceptedBaseline(Option<GenerationId>),
    SecurityFloor(Option<GenerationId>),
    ExternalAccepted {
        seq: u64,
        digest: Hash,
    },
    TokenUsed {
        nonce: [u8; 16],
        expires: Timestamp,
        approver: u64,
        txn: u64,
    },
    AgentStarted {
        name: String,
        instance: [u8; 16],
        by: u32,
    },
    Resolved {
        txn: TxnId,
        resolution: Resolution,
        by: Actor,
    },
    Reconciliation(Reconciliation),
    HoldApplied {
        unit: UnitId,
        by: HoldBy,
    },
    HoldLifted {
        unit: UnitId,
        reason: String,
    },
}

Variants

Prepared(Box<Transaction>)

The transaction exists from this record on (§12 step 4).

Advance

Fields

txn: TxnId

epoch: u64

to: TxnState

note: String

withdrawn_for: Option<TxnId>

§12f: on a Rejected(Interrupted), the rollback it was withdrawn for; the daemon prepares it again once that rollback is terminal, across a restart too. Absent in records from before it.

Takeover

Compare-and-swap on the epoch: valid only if from_epoch is current.

Fields

txn: TxnId

from_epoch: u64

lease: Lease

Renew

Fields

txn: TxnId

epoch: u64

worker_pid: Option<u32>

boot_at: Timestamp

The renewal’s time on the boot clock (§12h); 0 in records written before v4.5, which then read as long ago.

OpBegin

Written and fsynced before the backend call it names.

Fields

op: OpId

call: String

OpAck

Fields

op: OpId

outcome: Outcome

OverrideSet(Override)

OverrideLifted(UnitId)

Incident(Incident)

KnownGood(GenerationId)

LiveTested(Option<GenerationId>)

AcceptedBaseline(Option<GenerationId>)

SecurityFloor(Option<GenerationId>)

The security floor (§12e): derived when a generation commits, or set by an administrator’s mark-security-floor; never by a proposal.

ExternalAccepted

The external desired-state document accepted (§9 hook, §12c, B-16): its sequence number and the hash of its bytes. Replay protection lives here, in the journal and its checkpoint, not in a cache file.

Fields

seq: u64

digest: Hash

TokenUsed

An approval used (§12 step 4, I7): by whom, for which transaction.

Fields

nonce: [u8; 16]

expires: Timestamp

approver: u64

The approver’s PrincipalId (a human’s is their uid); 0 in records from before v4.6.

txn: u64

AgentStarted

planarian agent run <name> by this uid (§11, I24): the started unit’s instance (its InvocationID) acts with that user’s permissions, attributed to the agent. Journaled once the unit has started, so a failed or refused start binds nothing; covered by the chain.

Fields

name: String

instance: [u8; 16]

Zero in records written before v4.6, which then match no peer.

by: u32

Resolved

Fields

txn: TxnId

resolution: Resolution

by: Actor

Reconciliation(Reconciliation)

HoldApplied

§12d Network security fails closed: the unit’s traffic is held, journaled before the call (write-ahead). A failure posture response, not a transaction (docs/bypasses.md).

Fields

unit: UnitId

by: HoldBy

HoldLifted

The hold is lifted: the unit is Running and its Readiness probes pass, or an attested release. Journaled before the call.

Fields

unit: UnitId

reason: String

Trait Implementations

impl Clone for Record

fn clone(&self) -> Record

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Record

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Record

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Record

fn eq(&self, other: &Record) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Record

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Record

impl StructuralPartialEq for Record