Module image 

Program data owned beside a dispatchable machine.

Construct a module explicitly by parsing and lowering SST or decoding bytecode, then wrap it with Image::new. crate::Loadable pairs the image with a composite in separate fields so execution borrows code and metadata while independently mutating the machine.

Keep the image outside mutable Dispatch and unchanged during an invocation. Loadable rejects replacement while an invocation is active and resets execution state after successful replacement. Resetting execution does not reset devices or other independently loaded programs. Image construction is outside the owner; failures do not roll back caller mutations.

Structs

Image

Code and metadata for one independently loadable unit.