The Principia Machina/TPS/5.5 The new-container flow

Instruction artifact: TPS 0.1.0, page 5.5 The new-container flow. Part of TPS 0.1.0 and the TPM hub. Human-only edit (TPS 5.13). Version 0.1.0, proposed; declaration pending. Governing section: this page, TPS 5.5. The text below is this page's unit of the TPS 0.1.0 artifact, verbatim; the whole artifact and its file digest are on The Principia Machina/TPS 0.1.0.

TPS 5.5  THE NEW-CONTAINER FLOW
purpose: initiators; zone order and per-zone checks; the final pass;
         the human declaration and initialization; the change-request
         redirect; the local-AI path
governs: 5.5 | version: 0.1.0 (proposed) | class: instruction artifact
audience: operator, agent

5.5.1  Initiators: any human account, or any account in the agent group.
       A human uses the new-container form; an agent writes its DRAFT
       CONTAINER through TPX's API (see 1.1). [I-056] [I-041]
5.5.2  The three zones are entered in order, TPK, TrM, TMS. TPX runs each
       zone's checks as the zone is entered (the guide's kernel tests
       T1-T6; the four isomorphism checks; SR9 C1-C5) and returns a
       rejected component to the author. The TMS check is the last gate.
       [I-057] [I-077]
       NOTE: while a kernel-test or isomorphism-check body is owed, that
       check is INSPECTION by H-DECL before the declaration (see 2.2.4,
       2.3.8, 4.2 rows 34 and 35). [DI-4.1]
5.5.3  On the final pass TPX computes D(TPK), D(TrM), D(TMS), D(TFK),
       obtains the UUID, allocates the prefix under D1's uniqueness
       check, and writes the candidate certificate to staging. Before
       the human declaration no UUID is in use and no register exists.
       [I-058]
5.5.4  H-DECL lands the certificate on the DECLARATIONS page: state
       CERTIFIED. On that landing TPX writes the TFK pages from the
       draft, digest-verified against the certificate, and initializes
       the register (volume 1 OPEN; master record = the certificate),
       the control panel, the lock and collaboration pages, the
       manifest, library page and badge, and the first BUILD CHAIN line.
       [I-059]
5.5.5  The draft is then protected read-only and indexed under the
       container as provenance (see 1.1, DRAFT CONTAINER). [I-041]
5.5.6  CHANGE-REQUEST REDIRECT. An attempt to modify an established TFK
       is refused and redirected to this flow, pre-filled from the source
       when COPY-FORWARD is chosen and empty otherwise. The successor
       takes a new UUID and a new prefix and passes the same checks (see
       3.4). [I-060]
5.5.7  The Public Recorder digests no documents. A human holding a
       document hands it to a local AI; the AI enters the TFK through
       TPX's API if it is a certified agent, or the human enters the AI's
       output through the form. [I-054]
       OWED: the zone-by-zone check order for the new-container page and
       the per-component rejection form; kind: absence; C-12.