Function push_payload 

pub(crate) fn push_payload(
    doc: &Document,
    asset: &Asset,
    builder: &mut CommitBuilder,
)

The payload rider: the create-only asset op, pushed only where the document does not already hold the hash. Content addressing makes the non-edit filter exact — the same hash is the same bytes, so a second copy could only ever say what the first already said.