Module control_custody 

Emission-time local control custody. Emission-time custody for registered local controls.

Registration is deliberately separate from authority. Only the ordinary action doors can authorize or execute a descriptor. Unregistered private producers remain legacy-compatible and explicitly unqualified for History.

Registered queues are sealed in installation preorder. Each producer keeps its own FIFO or replacement discipline; there is no global temporal order. Stable subtree slots preserve this order across ModelView/Tile generations. Ordinary dispatch still uses the existing owner-specific canonical doors.

Structs

ControlCoverage

This is an inventory, never an assertion that arbitrary private storage was observed. Legacy compatibility is retained until downstream migration ends.

ControlDomain

ControlOutbox

A retained producer does not keep its owner, registry or widget alive.

ControlRenewal

Issued only by an owner host after closing the exact previous incarnation. It grants fresh producer installation, never transfer of pending descriptors.

ControlRequestId

RawControlSlot

Retained raw descriptor custody for a single last-write-wins producer.

Enums

ControlProducerDiscipline

CustodyAttachment

CustodyError

EmitError

LocalEmission

RawControlEmission

Result of emitting through a retained raw replace-one slot.