Module identity_plane 

Person ≠ machine ≠ OS-account identity plane.

Model

Principal	Meaning	Portable?
Person	Natural-person principal who controls Webizen	Yes — import/export across machines
Device (apparatus)	One install of Qualia on one machine	No — unique per install
OS account	Windows/macOS/Linux login	Not used as identity

A person may run Qualia on several devices. Jobs may name a target device_id; work runs locally only when the target is this apparatus (or unspecified). Remote dispatch is fail-closed until a live transport is wired — fleet registration still records peer devices for placement.

Secrets stay in app meta (person_identity.json, node_identity.json, device_fleet.json). Public snapshots never include private keys.

Re-exports

pub use fleet_jobs::accept_fleet_job_envelope;

pub use fleet_jobs::deliver_or_queue_remote_job;

pub use fleet_jobs::list_remote_outbox;

pub use fleet_jobs::FleetJobEnvelope;

pub use fleet_jobs::RemoteOutboxEntry;

Modules

fleet_jobs

Multi-apparatus job delivery: sign, POST, accept, outbox.

Structs

DeviceCapabilities

What this apparatus can accept for placement (honest flags, not marketing).

DeviceRecord

Full device record (no private keys — node secrets stay in node_identity.json).

IdentityPlaneSnapshot

UI/API snapshot: person public half + devices (no secrets).

PersonPrincipal

On-disk person principal (secret material).

PersonPublic

Public half of a person principal (safe to show in UI / share with peers).

PersonTransferBundle

Portable bundle for installing the same person on another machine.

Enums

JobPlacement

Where a job should run relative to this process.

Functions

ensure_local_apparatus

Ensure person + local apparatus + fleet entry exist.

export_person_public

export_person_transfer_bundle

Full person secret for multi-machine install. Caller must treat as recovery material.

get_identity_plane

import_person_transfer_bundle

Import person principal onto this machine, then re-bind local apparatus under them.

list_devices

register_remote_device

Register another apparatus (peer / second PC) for fleet awareness and job targeting.

resolve_job_placement

set_local_control_base_url

Update this apparatus’ advertised control URL (LAN/VPN base for fleet jobs).

sync_local_device_context

Type Aliases

DeviceRecordPublic

Public view (identical fields today; kept separate for API stability).