Struct GovernanceLedger 

pub struct GovernanceLedger<'connection> { /* private fields */ }

Implementations

impl<'connection> GovernanceLedger<'connection>

pub fn provision( connection: &'connection mut Connection, study: StudyId, ) -> Result<Self, LakeError>

Only datastore provisioning calls this, before publishing readiness.

pub fn open( connection: &'connection mut Connection, study: StudyId, ) -> Result<Self, LakeError>

Ordinary recovery never creates a missing ledger or guesses its origin.

pub fn append(&mut self, event: Uuid, evidence: &str) -> Result<(), LakeError>

The metadata adapter retains the event’s row lock across this call and its acknowledgement. An ambiguous commit is retried with the same event identity and exact evidence; a conflicting retry never overwrites it.

pub fn read(&self, event: Uuid) -> Result<Option<String>, LakeError>

Operator/reconciliation read; scoped custodian projection is app-owned.