Public Registry facade.
Purpose
-------
Expose the M11.1b mutating seam and lock primitives while keeping SQL
inside the storage backend.
Responsibilities
----------------
- Delegate ``execute_domain_command`` to the configured backend.
- Provide short delegation methods for the public domain API.
- Delegate lock acquire/release and startup sweep calls.
- Keep facade state limited to the backend and injected clock.
Diagnostics
-----------
Domain: OC_CHAT.MAIN
Levels:
L2 - lifecycle events
L3 - semantic details
L4 - deep tracing
Contracts
---------
- The facade performs no git, subprocess, model, or direct wall-clock work.
- Callers use this facade rather than backend internals for registry writes.
Dependencies
------------
- oc_diagnostics (structured debug logging via _dbg)
- oc_chat.registry.backends.base (backend contract and return types)
- oc_chat.registry.clock (injected Clock contract)
- oc_chat.registry.domain (lazy; queue, plan and round mutation functions the delegation methods forward to)
- oc_chat.registry.auth.events_writer (AuthEventsWriter records failed authentication attempts)
- oc_chat.registry.auth.roles (RoleGuard checks the operation against the actor slot kind)
- oc_chat.registry.auth.secrets_store (load_secrets and select_secret read the slot's secret block)
- oc_chat.registry.auth.signing (HmacProof parsing, CredentialMaterial and verify_hmac)
- oc_chat.registry.errors (HmacVerifyError and UnknownActorError raised on failed authentication)
1.15.0