manifest

The loads currently aboard, in the order they were taken on.

This is what makes carrying a fact rather than a claim. The transporter's moving state is derived from it (see movingStateFor), so MOVING_LOADED cannot be asserted by a protocol that is mistaken about what it is carrying -- and FracTimeTransporting, which is computed from that state, cannot be wrong in a way nothing would notice.

It is on the physical layer rather than in either protocol because a load aboard a vehicle is physical and because every protocol has one: the passive one carries a single entity, the active one carries whatever its tour has picked up, and a fixed-route one carries whoever boarded. One list, one derivation, one set of statistics.