Module rotation 

Core rotation execution pipeline.

A Revoked or Closed session fails the attempt up front; an Expired one is refreshed by the gate. execute_by bounds only the target-side steps (rotate, verify, terminate sessions), not the server-side cipher write and report.

Modules

cipher 🔒

The vault side of a rotation attempt: the pre-flight dry run and the cipher write (including the 409 re-check), plus fetching, checking and re-encrypting the cipher. The stage fixes how a rejection is reported.

gate 🔒

The gate for target-side steps: lease, cancellation, session and connectivity checks.

Structs

Attempt 🔒

One attempt’s inputs, shared by its steps.

CipherWritten 🔒

Proof that the cipher write succeeded.

ExecutionContext 🔒

Inputs to execute.

Verified 🔒

Proof that verify succeeded.

Enums

AbortReason 🔒

Why a gate aborted the rotation without reporting. The server’s release sweep reclaims the job.

ExecutionResult 🔒

The outcome of a single execute call.

Halt 🔒

Why an attempt stopped before success: report a failure, or abort unreported.

TargetStep 🔒

A gated, target-side integration step.

Functions

abort_from_api 🔒

The abort for an error that ends the attempt unreported, if it is one.

execute 🔒

Runs one rotation attempt: a cipher pre-flight check, then resolve, generate, rotate, verify, write cipher, terminate sessions and report.

halt_from_api 🔒

Maps an API error to a halt: abort when the attempt or session is gone, else report Internal.

report_failure_absorb 🔒

Reports a rotation failure, absorbing report errors. Also used by the claim loop, before an ExecutionContext exists.