kernl API
    Preparing search index...

    Type Alias OpClass

    OpClass:
        | "relay:subscribe"
        | "relay:publish"
        | "relay:publish:delete"
        | "outbox:subscribe"
        | "outbox:publish"
        | "resource:bytes"
        | "storage:write"
        | "dm:send"
        | "intent:invoke"
        | "control"
        | "generic"

    Operation class the guard assigns to an inbound applet envelope. kehto's firewall treats the class as an opaque key; kernl gives it meaning.