v0 state

Impl

Impl is the contract an implementation realm must satisfy. This interface is the one thing here that can never change: it is compiled into every caller.

prefix

prefix is the only gate. An implementation must live under it. gno ships p/nt/nestedpkg/v0 for exactly this check, but its AssertCallerIsSubPath wants the implementation nested UNDER the facade's own path, and with the version segment last (facade/v0, impl/v0) no sibling is a sub-path of another. IsSameNamespace is the other shipped option and is far too loose: it would let any realm in the whole namespace seize this one. Hence an explicit prefix.

StageOpen

// any realm under the prefix takes over by deploying

StageSealed

// nothing may register again, the live implementation is final

live

livePath

stage

Register

Register makes the calling realm the live implementation. Called from the implementation's own init, so deploying IS the upgrade.

Seal

Seal ends this realm's upgradeability, forever. Callable only by the implementation currently serving, because with no owner that is the only actor the facade already trusts. It grants nothing new: whoever could deploy under the prefix could already take the realm over, and this only lets them make that the last word. One-way, and there is no rung above it.

Stage

Stage is the rung this realm is on. It only ever goes up.

StageName

StageName is Stage as the word a caller reads in Render.

Live

Live is the package path currently serving, or "" before the first deploy.

Greet

Greet forwards to the live implementation.

Version

Version reports the live implementation's own version string.

assertLive

Render