Returns true iff a concrete op falls within a claim. This is the
write-time and publish-time enforcement primitive: each op is matched
before it touches the draft, and actual ops are verified against the
manifest's scope_claim at publish.
Unknown tag values fail closed: if the claim constrains storey=EG
and the op cannot resolve a storey tag, the op does not match.
Returns true iff a concrete op falls within a claim. This is the write-time and publish-time enforcement primitive: each op is matched before it touches the draft, and actual ops are verified against the manifest's
scope_claimat publish.Unknown tag values fail closed: if the claim constrains
storey=EGand the op cannot resolve astoreytag, the op does not match.