Hold 0114's two acts, and put the local half of a sign-out before the request

.github/coverage/pinned-surface

@@ -73,6 +73,7 @@ module  src/session/delegated.rs    The value that ties a delegated sign-in atte
 module  src/session/renewal.rs      The generation a rejection is answered against and the moment a renewal is due. A defect here is twenty renewals where 0034 fixes one, or a session signed out because a network dropped rather than because a server refused it.
 module  src/session/password.rs      0030's password: the one reading that spends it, the account name kept as it was typed, and the closure that refuses an answer missing one of the three facts 0005 says a session holds. A defect here is a credential readable twice or printable, or a session built around a token a server never sent.
 module  src/session/quick_connect.rs  0031's cadence for asking about a Quick Connect exchange, its four endings, and which of the two values the server issued crosses to the client. A defect here is a backoff nobody decided on a route where the answer arrives from a person, a denial reported as a failure, or the value the core presents handed out beside the code.
+module  src/session/sign_out.rs   0114's two acts: what each of them takes away, the order that puts the local half of a sign-out before the request to the server, how work in flight ends, and what a removal that could not be completed reports. A defect here leaves a token in memory on a device somebody handed over, empties a library on an ordinary evening act, or tells an operator their data is gone when it is not.
 module  src/session/device.rs       The device identity, whose identifier is one part of the cache key 0041 derives and one half of the key a server puts a live session under, so a defect here reaches two other surfaces on this list.
 module  src/server/mod.rs           The server module and what it places at its own boundary.
 module  src/server/address.rs       The address a person typed, parsed and refused where it is not usable.

src/session/mod.rs

@@ -31,6 +31,12 @@
 //! crosses to the client. It asks no server anything, for the same reason
 //! [`delegated`] does not.
 //!
+//! [`sign_out`] holds the part of 0114 a type, a table and a pair of counts
+//! settle: that the server half of a sign-out cannot be reached before the local
+//! half is done, which of the two acts removes what, how each kind of work in
+//! flight ends, and what a removal that could not be completed reports. It signs
+//! nothing out, because there is no session in this tree to end.
+//!
 //! [`renewal`] holds the part of 0034 a counter and one clock reading settle:
 //! the generation a rejection is answered against, which rejection starts the
 //! session's one renewal and which joins it, what each renewal outcome does, and
@@ -42,6 +48,7 @@ pub mod device;
 pub mod password;
 pub mod quick_connect;
 pub mod renewal;
+pub mod sign_out;
 
 /// One signed-in session against one server.
 ///