orchestrata_ultimate.factory.enforcement
Reference › orchestrata_ultimate › factory › enforcement › init
Package marker for the state-diff enforcement core (SPEC-033 section 3, rows B1a, B1b and B1c, Phase 1). It defines no code of its own; see the package page.
At a glance
| Source | src/orchestrata_ultimate/factory/enforcement/__init__.py |
| Lines of code | 27 |
| Classes | 0 |
| Functions | 0 |
| Imports (internal) | none |
| Imported by | none |
| Tests that import it | none |
Class diagram
No classes; see Functions.
Dependency diagram
No internal imports and no importers.
API
No public API: the module defines no classes, functions or constants.
Source
"""State-diff enforcement core (SPEC-033 §3, B1a/B1b/B1c, Phase 1).
The enforcement boundary is the committed worktree state (ADR-0001): at
commit, a full-filesystem tree diff is matched content-exactly against a
ledger of governed write events, and any delta with no registered producer
is rejected. This package is file-based (JSONL/JSON) persistence — the
graph-backed store lands at B4a; per spec §9 "against the existing Neo4j...
B4b not required" for the Phase-1 thesis proof.
No ``@traces`` decorators in this package: SPEC-033 §3 (this work's home)
defines no ``REQ-033-*`` ids — those belong to §6. Requirement-id authoring
for §3 is a spec change outside this lane (orchestrator-settled).
Modules
-------
models ``WriterIdentity`` (the (binary-hash, config-hash) pair, ADR-0017)
and ``GovernedWriteRecord`` (in-toto-link-SHAPED, ADR-0030).
ledger ``EventLedger`` (append-only JSONL of governed-write records) and
``WriterRegistry`` (JSON file of registered writer identities).
bootstrap ``classify_delta``, ``bootstrap_baseline`` (git tree -> content
hashes) and ``record_bootstrap`` — the unregistered-new-file /
first-commit registration path (B1b).
enforce ``enforce`` — the state-diff enforcement core (B1a): fail-closed,
no allow-by-default branch.
"""
from __future__ import annotations