Architecture Gallery

Cargo workspace with five crates plus Tauri desktop shell, tests + docs. gav-cli links gav-core directly (no daemon). gav-timeline is feature-gated behind timeline in gav-core; defaults on for the CLI. NLE adapters are stubs pending S7+ crate work.

Single binary gav reaches every layer directly. The CLI never depends on a daemon. The vault is content-addressable (blake3, sharded). The ledger is SQLite WAL. C2PA manifests sign with a self-signed Ed25519 cert by default; signed manifests validate as signed + valid + untrusted until a CAI cert is loaded. The timeline plane sits beside (not above) the vault: it splits OTIO into six per-domain JSON blobs, each versioned independently.

Public surface of gav-core + gav-timeline. Engine is the only mutation entry point; tests construct it with deterministic Clock + IdGen via Engine::open_with. Every public outcome carries a SCHEMA string and matches the JSON-RPC method name in GAV011 §8.

Every capability is reachable from gav <cmd> --json with no daemon and no GUI installed. gav serve exposes all 24 RPC methods over JSON-RPC 2.0 + WebSocket; Tauri embeds it in-process. AI agents and CI pipelines consume the same JSON as the three keystone views.

Three canonical operations: Snapshot (auto-C2PA on by default), Branch checkout (symlink swizzle, ~14 ms for 100 files in debug), and Timeline import (six per-domain JSON blobs + a manifest blob, each auto-snapshotted and auto-manifested).

SQLite v1 schema (rusqlite + bundled). WAL mode, FKs ON, indexes on hot paths. Branch lineage walks branches.parent_id; branch_state is the canonical "what does this branch see?" query. C2PA tables back the spec-compliant manifest layer; idempotent inserts via ON CONFLICT … DO UPDATE/NOTHING.