Module retirement 

Retirement synchronization, never Source, caller or disclosure authority.

The embedding owner must separately bind its live Source/worker. No constructor here installs a semantic reader or changes its availability. There is no public guard, positive probe, raw Arc, callback or payload slot.

Construction initializes the platform mutex before any handle is shared, so retirement and drop never allocate.

Structs

MountRetirement

Negative custody consumed before the real component factory. No Live association or semantic reader can be created by this value.

RetirementDomain

Domain owner. Drop retires every marker, even with observers. This is deliberately non-Clone and has no public positive validation method.

RetirementHandle

A negative reference. It cannot keep its owner logically live. Cloning is permitted even after retirement; explicit retirement is irreversible.

RetirementOwner

Marker owner. Drop retires this marker, not its siblings.

Enums

RetirementError

Fixed lifecycle failures; none contains application content.