ImportKey (schema, record) rides SubjectDeclaration and SubjectState as an
optional field (serde default, skipped when None, so keyless worlds keep their
digests) and is exposed on SubjectSnapshot. resolve_patch, the one resolution
owner for genesis and the owner, consumer, Play and elaborator doors, refuses a
malformed key, a key declared twice in one patch, and a key any existing subject
holds, retired included. admit_resolved, the subjects map's only writer, holds
the same injectivity as an invariant. Typed mismatches name the handle only.
Compile-checked (cargo check --tests) on Starfire; tests not yet run, so no
claim that this commit's tests pass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
b8465e50d3