v0 state

owner

prefix

prefix bounds who may even nominate itself. Accepting is still a separate, owner-gated decision.

Impl

Impl is the contract an implementation realm must satisfy.

StageOpen

// anything under the prefix may propose, the owner may accept any candidate

StageClosed

// no new candidates; the owner may still accept among those already proposed

StageFrozen

// nothing may be accepted again, whatever is live is final

Ownable

stage

candidates

// pkgpath -> Impl

live

livePath

Propose

Propose nominates the calling realm. Called from the implementation's init, so deploying makes a candidate and nothing more.

Accept

Accept promotes a proposed path to live. Owner-gated, and it takes a STRING, so it is callable straight from a wallet.

Close

Close stops new candidates. The owner may still accept among those already proposed, so a rollback stays possible while new code does not.

Freeze

Freeze ends this realm's upgradeability, forever. There is no rung above it and nothing takes it back: that is the whole point, and it is the only way out of every caller trusting the owner rather than the code.

tighten

tighten is the ratchet. Owner-gated, and it refuses to loosen: the stage is the one piece of state here that a later owner cannot undo.

Stage

Stage is the rung this realm is on. It only ever goes up.

StageName

StageName is Stage as the word a caller reads in Render.

Live

Live is the package path currently serving, or "" before the first Accept.

Candidates

Candidates lists every path that has nominated itself, in order.

Greet

Greet forwards to the accepted implementation.

Version

Version reports the accepted implementation's own version string.

assertLive

Render