Load every store from ns/<ns>/; refuse flat paths at the verified commit (issue 1)

.ddd/seams/seam-rust-ledger-cli-src-commands-declare-rs.yaml

@@ -0,0 +1,14 @@
+format: 2
+id: seam/rust/ledger-cli-src-commands-declare-rs
+boundary: contract surface of ledger-cli/src/commands/declare.rs
+verdict_knowledge: 'CLI users learn declare takes --namespace to name the directory a new set files under, required only when the store holds several namespaces and inferred from the one directory otherwise (LP-3.34).'
+contract_location: ledger-cli/src/commands/declare.rs
+obligations: []
+metadata: {}
+bindings:
+- symbol: namespace
+  file: ledger-cli/src/commands/declare.rs
+  before: sha256:32068ee222b0b7682349a7b8427c714c821cc75a2b6209a5b9dc5a4b6f5b9367
+  after: sha256:2abf1e15dd84887baf833ad418a0bccf0788ae2fcd28db235ae04b420a79b590
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:0ffc177fe09f85a0b7ff3f0abbe19b4b7bb0211a5a6396357ef38b95cef795f8

.ddd/seams/seam-rust-ledger-cli-tests-common-mod-rs.yaml

@@ -1,7 +1,7 @@
 format: 2
 id: seam/rust/ledger-cli-tests-common-mod-rs
 boundary: contract surface of ledger-cli/tests/common/mod.rs
-verdict_knowledge: Test authors learn signing invocations run under a pseudo-terminal through script(1) and everything else under pipes, so the binary's real TTY check is what the suites exercise.
+verdict_knowledge: 'Test-only: the shared harness of the ledger-cli integration suites, with no consumer outside ledger-cli/tests/ — test authors learn signing invocations run under a pseudo-terminal through script(1) and everything else under pipes, so the binary''s real TTY check is what the suites exercise, and that a repo''s per-namespace paths and a fixture store copied in under ns/<namespace>/ come from here.'
 contract_location: ledger-cli/tests/common/mod.rs
 obligations: []
 metadata: {}
@@ -186,3 +186,87 @@ bindings:
   after: sha256:3a4828d68356ad4027e5a5b45edcceca1224c6a6f7677662eaf11390c79cc396
   base_revision: 88b3de113c03fa70091d00fef217e55d44ccac3e
   hash: sha256:b3d24f2ad18976db7025c7f442dc3a7e2e3e03f99683cb0ba2a8ee1ccb6bd9b0
+- symbol: stage_fixture
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:62e4f917e229e1905ddd93807c03db4e10b4abd81955fd59d4656949030a651e
+- symbol: stage_fixture_into
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:6c62b1c1e7dc60dc7f4d0047fd2533008eb7f4678ed3931cc68b13407ce652e2
+- symbol: stage_store_into
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:1f6518ef7db2e19384727f5045e83c07c70f9dc8f69b0397a14e74e3a0d144ae
+- symbol: stage_workspace
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:b47acb536ac847e4b4403b7880d9cc8389d9cb4ad14321397ede5bd4444564dc
+- symbol: declare_in
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:28b0181db0b2265ee8c3aa91e93d8be50b1a34af6d61e54ba259eb0f8996c60d
+- symbol: log_dir
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:f82034ffe4db2cd20efa572c23087e6d157670a34c6ff014d2f1bc18bdc8c3db
+- symbol: ns_dir
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:5d6bf9ccebc1b51cd18f1c5909636f2d9fda84a79869f183cb38429f927fffa7
+- symbol: roles_dir
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:a114a1cf9097284905e70b7f0d204234338824f71842cb320cc456be2f98f427
+- symbol: sets_dir
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:bf78dbc8862617e18e1841123a853e2289a7a9efaea13df8baeaf76f65d46aff
+- symbol: sidecar
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:43a2c6e1d6ecfd1e959f19213a60be34bc5b947c513c361e7df664c5fd862f57
+- symbol: sidecar_count
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:ed2167b6430970faa7f3f30ea3de4665cf8eae9d3f1748c2910a2c2f296d75c5
+- symbol: sig_dir
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:3d3db7593710973b5b82c5c27079845d596aaae9680c43f0cab4fbe219fa7efb
+- symbol: signers
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:9e2ce878c44c672043143de359d5a4fb69c5e57bc13c01d79e64839977d92bb5
+- symbol: signers_path
+  file: ledger-cli/tests/common/mod.rs
+  before: sha256:18fc91bbdbea11fc51d15eab25d300acf77170f69d1c6113c6040976aeb3d4d1
+  after: sha256:4950bad589fd7178075bd548a44829ce5427af2c8f9efb20d2cfb88bf1460db8
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:8debaac1a6019c0a4e89fd05aebdc38472dc853fd33d1e9eef714237ff482817

.ddd/seams/seam-rust-ledger-core-src-author-authority-ops-rs.yaml

@@ -150,3 +150,9 @@ bindings:
   after: sha256:caa27c39eb0eb41790e5eaba4b7a637a9f7d9f582b93c0f393fd3ed74f09d819
   base_revision: c4b9c904c0389a9e3b484e92436dd01637346118
   hash: sha256:31c40fcd2a7b523f89a9d4127f1e4faa58a0e867f3f8d67a8323fb9cf83d3d2f
+- symbol: namespace
+  file: ledger-core/src/author/authority_ops.rs
+  before: sha256:420bc3b1d4f8608d1e986ff69e58ab52dd15e7d2788caccdd9ed8839add42366
+  after: sha256:5ee3f00e52414f633ca8b3970070a8ea892e566db63ac49511c311d9f7700c18
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:bc915b2048b8716dff644b51608397512a153cd62eb87e6091331047bd121a90

.ddd/seams/seam-rust-ledger-core-src-author-declare-rs.yaml

@@ -0,0 +1,14 @@
+format: 2
+id: seam/rust/ledger-core-src-author-declare-rs
+boundary: contract surface of ledger-core/src/author/declare.rs
+verdict_knowledge: 'Callers learn a declared set is filed under the namespace named in DeclareArgs.namespace or, when none is named, the store''s single namespace directory, and that a store holding several refuses an unnamed declaration (LP-3.34).'
+contract_location: ledger-core/src/author/declare.rs
+obligations: []
+metadata: {}
+bindings:
+- symbol: namespace
+  file: ledger-core/src/author/declare.rs
+  before: sha256:5839ccbcb859e14d370ec3a55c7c1509225b0ed7eae207184bda533db7a31e53
+  after: sha256:2605056afab363291eb394dc9c0de329100f1aa31b0a9dc8d7a8cd8712416026
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:d576ae3210be23623249b1a51b7f406aac97e77eb59c5fd095f1d3b6d4689cbb

.ddd/seams/seam-rust-ledger-core-src-author-home-rs.yaml

@@ -0,0 +1,38 @@
+format: 2
+id: seam/rust/ledger-core-src-author-home-rs
+boundary: contract surface of ledger-core/src/author/home.rs
+verdict_knowledge: 'Callers learn how a change-set finds its home: an act''s namespace is read from the entities it carries or names (a decision id, a binding''s or policy''s namespace, a revocation''s target, a grant''s under), a new set''s from --namespace or the store''s single directory, so no verb files a change-set outside .decisions/ns/<ns>/ (LP-3.34, ruling 45).'
+contract_location: ledger-core/src/author/home.rs
+obligations: []
+metadata: {}
+bindings:
+- symbol: acceptance_namespace
+  file: ledger-core/src/author/home.rs
+  before: absent
+  after: sha256:4926c14cc6dcd79530f72f17a95e77fa4229cfcd10cc275e51d01a69c33652be
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:fb7dac9caf078789880050a15c968834e667c1fe34014c728c238281b2cea821
+- symbol: grant_namespace
+  file: ledger-core/src/author/home.rs
+  before: absent
+  after: sha256:4926c14cc6dcd79530f72f17a95e77fa4229cfcd10cc275e51d01a69c33652be
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:e8e161b1ddf549c9688f5b0d5147d1bd2e71784915b15cac7566b7e59e842a46
+- symbol: interval_namespace
+  file: ledger-core/src/author/home.rs
+  before: absent
+  after: sha256:4926c14cc6dcd79530f72f17a95e77fa4229cfcd10cc275e51d01a69c33652be
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:6a40e6ca52f2001fa1156188232880901a26638fdd0a8402474c9b7657527d7f
+- symbol: namespace_of
+  file: ledger-core/src/author/home.rs
+  before: absent
+  after: sha256:4926c14cc6dcd79530f72f17a95e77fa4229cfcd10cc275e51d01a69c33652be
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:8d5bc372fb239897d0651422b1963028d5280ea622535a527203d92543c58eb3
+- symbol: resolve_namespace_dir
+  file: ledger-core/src/author/home.rs
+  before: absent
+  after: sha256:4926c14cc6dcd79530f72f17a95e77fa4229cfcd10cc275e51d01a69c33652be
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:585c918727532e7362592a70f1b8d87bb8b3094a160857839633191e66fd94a9

.ddd/seams/seam-rust-ledger-core-src-authority-fixture-rs.yaml

@@ -1,7 +1,7 @@
 format: 2
 id: seam/rust/ledger-core-src-authority-fixture-rs
 boundary: contract surface of ledger-core/src/authority/fixture.rs
-verdict_knowledge: "Test authors learn the builders for roles, grants, acceptances and intervals used by the authority tests."
+verdict_knowledge: Test authors learn the builders for roles, grants, acceptances and intervals used by the authority tests.
 contract_location: ledger-core/src/authority/fixture.rs
 obligations: []
 metadata: {}
@@ -72,3 +72,9 @@ bindings:
   after: sha256:c6fd80134efefd5363add1d3af47052c945cb0401a7d070f7f73341745e039f5
   base_revision: e33398d874ec5ddd52404c4f2c16039d5ed7cdbb
   hash: sha256:94365e2a1f3f1994d49844cd571493df9f24366ebfa91d35285b4f0db21ebb9d
+- symbol: NS
+  file: ledger-core/src/authority/fixture.rs
+  before: sha256:cc1ab203523883be0a659bc7976c52296df2a9623824e546a7058c926114a45a
+  after: sha256:d331fc23ea716ac40b2eac0bde6d3903ae6610c421b4142c8a5f5f38afc973cb
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:4d59ed84e67973f26047487cc69314cfbcf6e380c4f1b85c3b440afbb40c37e1

.ddd/seams/seam-rust-ledger-core-src-authority-role-rs.yaml

@@ -222,3 +222,9 @@ bindings:
   after: sha256:d3389671f033bdfd184eafcc064ce345e2e3f311f80ed0a57d603f748ef5782d
   base_revision: b2e166ca3fc8d53dc52e1852172a42abd80dd8a2
   hash: sha256:a7395323c4e3ba8eeff5d1c08520c2950d3d6b2c2776beae3e07c8567bb3cfee
+- symbol: namespace
+  file: ledger-core/src/authority/role.rs
+  before: sha256:34668194fcaf0cd4372274a11f946b0161613d54efe4efceffe9411386b94671
+  after: sha256:a9aae1aa28b9fea20c12fd1f9c17138a3ca5be654975ba772b2147509affdef1
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:94148fe0bacc3e7ef0033803df5d0603837944923e042db446dbd4d1e474e8ef

.ddd/seams/seam-rust-ledger-core-src-authority-signers-rs.yaml

@@ -1,7 +1,7 @@
 format: 2
 id: seam/rust/ledger-core-src-authority-signers-rs
 boundary: contract surface of ledger-core/src/authority/signers.rs
-verdict_knowledge: Consumers learn allowed_signers is derived from key bindings in OpenSSH form, written by the identity verbs, and held byte-identical by verify's [SIGNERS] stage.
+verdict_knowledge: 'Consumers learn allowed_signers is derived per namespace from that namespace''s key bindings in OpenSSH form, written by the identity verbs at .decisions/ns/<ns>/allowed_signers, and held byte-identical by verify''s [SIGNERS] stage.'
 contract_location: ledger-core/src/authority/signers.rs
 obligations: []
 metadata: {}
@@ -72,3 +72,21 @@ bindings:
   after: sha256:661c2da986aa08f2d1c994b4cef1dec84dcf93ce26e8df1f9309180ea265940f
   base_revision: 969c4fa55c488eb473bb892cdced00008607455b
   hash: sha256:26d49dc9593d0093aeb3fecebd5e60dc569503f230432b4e4f13f7c8e6889477
+- symbol: derive
+  file: ledger-core/src/authority/signers.rs
+  before: sha256:d8dd1c2c591ccd7cf75d737fb8bf5ecc79e271600b33d57397ce84dc847a9ce3
+  after: sha256:3e0780d22c990a69f8205668616cd6971976ec3130ee73caf7745cf51997396a
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:fd93b1d4d2a52e7a75392ea3793ef00adcf78a2e3047c9fa39fd4d995514a2f8
+- symbol: derive_each
+  file: ledger-core/src/authority/signers.rs
+  before: sha256:d8dd1c2c591ccd7cf75d737fb8bf5ecc79e271600b33d57397ce84dc847a9ce3
+  after: sha256:3e0780d22c990a69f8205668616cd6971976ec3130ee73caf7745cf51997396a
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:761a2d8414f5a4dfe2bd19e520381a2b5b623a93e7185602f6a3d73f58454a6d
+- symbol: path
+  file: ledger-core/src/authority/signers.rs
+  before: sha256:d8dd1c2c591ccd7cf75d737fb8bf5ecc79e271600b33d57397ce84dc847a9ce3
+  after: sha256:3e0780d22c990a69f8205668616cd6971976ec3130ee73caf7745cf51997396a
+  base_revision: 70395dfe317cb9a00665433813766ca763f3c58a
+  hash: sha256:1100a9e4e2b13c50ad9c31ffd8123af332e6e432cc0eca45e0f38a77ca12ca85