access: screening received changes

access::screen: a batch of received changes judged change by change,
those that change what rules read applied before the next is judged;
a refused change stays out with whatever builds on it, kept aside for
operators; changes missing dependencies wait.

Auth plan M6.

1 files changed, 3 insertions, 0 deletions

diff --git a/src/access/mod.rs b/src/access/mod.rs
index 99c8ecd..1109fa6 100644
--- a/src/access/mod.rs
+++ b/src/access/mod.rs
@@ -17,6 +17,9 @@ pub(crate) mod registry;
 // Judging changes on receipt is what uses it; until then, the tests.
 #[cfg_attr(not(test), allow(dead_code))]
 pub(crate) mod rules;
+// Judging changes on receipt is what uses it; until then, the tests.
+#[cfg_attr(not(test), allow(dead_code))]
+pub(crate) mod screen;
 pub(crate) mod token;
 
 /// What a capability lets its holder do, at its path and below.