Function require_top_edge 

async fn require_top_edge(
    state: &AppState,
    creator: &HostedAccount,
) -> Result<(), ApiError>

Re-reads the operator’s record for the root above a creator — the account with no hosted parent, other than the server itself — inside TOP_EDGE_TTL, and refuses a creation beneath a root the operator no longer names. A creator deeper down is on the same chain, so its root is read the same way; the hosted edges between are the provisioner’s to check. A repository that cannot be read leaves the poll’s last verdict standing: a lapsed root is already quarantined, and the registry refuses it.