modules/accordare-stav-producer) is an independently installable, freezing-path Go producer for the bounded SAV Named Version audit circuit. It keeps pre-mutation intent and append recovery durable, authenticates its local peers, and submits only the exact safe candidate admitted by its closed vocabulary. It is not the STAV append authority itself.
The intent, outcome, recovery pattern
The producer follows a three-step pattern for every audited mutation:1
Pre-mutation intent
Record the caller’s stated intent durably before any change becomes observable. The producer refuses candidates outside its closed vocabulary.
2
Terminal outcome
After the mutation completes or fails, capture the exact outcome so the audit reflects reality, not a hoped-for state.
3
Bounded recovery
On interruption, the producer performs bounded recovery of the append stream without inventing a reconciliation or silently discarding intent.
Boundaries
- The producer’s vocabulary is closed. It accepts only SAV Named Version audit candidates.
- The producer is freezing-path. It must not become a hot-path dependency.
- The producer authenticates local peers; it does not authenticate remote callers.
Related surfaces
STAV
The append authority that seals audit records.
SSIAG
Authorizes the mutation the producer audits.
SAV
The Named Version composition semantics that this circuit audits.
qxctl vector commands
Ratified Accordare grammar arrives as
qxctl accord ... once implemented.