diff --git a/src/lib/be/mod.rs b/src/lib/be/mod.rs
index b9d9ce6df..fe0585516 100644
--- a/src/lib/be/mod.rs
+++ b/src/lib/be/mod.rs
@@ -108,6 +108,29 @@ pub trait BackendReadTransaction {
             Ok(entries)
         })
     }
+
+    /// Given a filter, assert some condition exists.
+    /// Basically, this is a specialised case of search, where we don't need to
+    /// load any candidates if they match. This is heavily used in uuid
+    /// refint and attr uniqueness.
+    fn exists(&self, au: &mut AuditScope, filt: &Filter) -> Result<bool, BackendError> {
+        let r = self.search(au, filt);
+        match r {
+            Ok(v) => {
+                if v.len() > 0 {
+                    audit_log!(au, "candidate exists {:?}", filt);
+                    Ok(true)
+                } else {
+                    audit_log!(au, "candidate does not exist {:?}", filt);
+                    Ok(false)
+                }
+            }
+            Err(e) => {
+                audit_log!(au, "error processing filt {:?}, {:?}", filt, e);
+                Err(e)
+            }
+        }
+    }
 }
 
 impl Drop for BackendTransaction {
@@ -223,29 +246,6 @@ impl BackendWriteTransaction {
         })
     }
 
-    /// Given a filter, assert some condition exists.
-    /// Basically, this is a specialised case of search, where we don't need to
-    /// load any candidates if they match. This is heavily used in uuid
-    /// refint and attr uniqueness.
-    pub fn exists(&self, au: &mut AuditScope, filt: &Filter) -> Result<bool, BackendError> {
-        let r = self.search(au, filt);
-        match r {
-            Ok(v) => {
-                if v.len() > 0 {
-                    audit_log!(au, "candidate exists {:?}", filt);
-                    Ok(true)
-                } else {
-                    audit_log!(au, "candidate does not exist {:?}", filt);
-                    Ok(false)
-                }
-            }
-            Err(e) => {
-                audit_log!(au, "error processing filt {:?}, {:?}", filt, e);
-                Err(e)
-            }
-        }
-    }
-
     pub fn modify() {
         unimplemented!()
     }
diff --git a/src/lib/error.rs b/src/lib/error.rs
index 5da382eec..57e5c0047 100644
--- a/src/lib/error.rs
+++ b/src/lib/error.rs
@@ -16,4 +16,5 @@ pub enum OperationError {
     Backend,
     SchemaViolation,
     Plugin,
+    FilterGeneration,
 }
diff --git a/src/lib/event.rs b/src/lib/event.rs
index 4de8496eb..3077ffdc5 100644
--- a/src/lib/event.rs
+++ b/src/lib/event.rs
@@ -108,6 +108,13 @@ impl CreateEvent {
             entries: entries,
         }
     }
+
+    pub fn new_internal(entries: Vec<Entry>) -> Self {
+        CreateEvent {
+            internal: true,
+            entries: entries,
+        }
+    }
 }
 
 #[derive(Debug)]
diff --git a/src/lib/server.rs b/src/lib/server.rs
index 6adf4f27f..1889a7d3d 100644
--- a/src/lib/server.rs
+++ b/src/lib/server.rs
@@ -124,7 +124,7 @@ fn start_system_info(audit: &mut AuditScope, qs: &QueryServerWriteTransaction) {
     // check it's version
     // migrate
 
-    qs.internal_assert_or_create(e);
+    qs.internal_assert_or_create(audit, e);
 }
 
 fn start_anonymous(audit: &mut AuditScope, qs: &QueryServerWriteTransaction) {
@@ -147,7 +147,7 @@ fn start_anonymous(audit: &mut AuditScope, qs: &QueryServerWriteTransaction) {
     // if no, create
     // check it's version
     // migrate
-    qs.internal_migrate_or_create(e);
+    qs.internal_migrate_or_create(audit, e);
 }
 
 // This is the core of the server. It implements all
@@ -297,7 +297,7 @@ impl QueryServer {
 }
 
 impl<'a> QueryServerWriteTransaction<'a> {
-    pub fn create(&mut self, au: &mut AuditScope, ce: &CreateEvent) -> Result<(), OperationError> {
+    pub fn create(&self, au: &mut AuditScope, ce: &CreateEvent) -> Result<(), OperationError> {
         // The create event is a raw, read only representation of the request
         // that was made to us, including information about the identity
         // performing the request.
@@ -386,13 +386,13 @@ impl<'a> QueryServerWriteTransaction<'a> {
     // and markers. They act as though they have the highest level privilege
     // IE there are no access control checks.
 
-    pub fn internal_exists_or_create(&self, e: Entry) -> Result<(), ()> {
+    pub fn internal_exists_or_create(&self, e: Entry) -> Result<(), OperationError> {
         // If the thing exists, stop.
         // if not, create from Entry.
         unimplemented!()
     }
 
-    pub fn internal_migrate_or_create(&self, e: Entry) -> Result<(), ()> {
+    pub fn internal_migrate_or_create(&self, audit: &mut AuditScope, e: Entry) -> Result<(), OperationError> {
         // if the thing exists, ensure the set of attributes on
         // Entry A match and are present (but don't delete multivalue, or extended
         // attributes in the situation.
@@ -403,50 +403,69 @@ impl<'a> QueryServerWriteTransaction<'a> {
         // few attributes.
         //
         // This will extra classes an attributes alone!
-        unimplemented!()
-    }
-
-    // Should this take a be_txn?
-    pub fn internal_assert_or_create(&self, e: Entry) -> Result<(), ()> {
-        // If exists, ensure the object is exactly as provided
-        // else, if not exists, create it. IE no extra or excess
-        // attributes and classes.
-
-        // Create a filter from the entry for assertion.
-        let filt = match e.filter_from_attrs(&vec![String::from("name")]) {
+        let filt = match e.filter_from_attrs(&vec![String::from("name"), String::from("uuid")]) {
             Some(f) => f,
-            None => return Err(()),
+            None => return Err(OperationError::FilterGeneration),
         };
 
-        // Does it exist?
-        match self.internal_exists(filt) {
+        // Does it exist? (TODO: Should be search, not exists ...)
+        match self.internal_exists(audit, filt) {
             Ok(true) => {
                 // it exists. We need to ensure the content now.
                 unimplemented!()
             }
             Ok(false) => {
                 // It does not exist. Create it.
-                unimplemented!()
+                self.internal_create(audit, vec![e])
             }
             Err(e) => {
                 // An error occured. pass it back up.
-                Err(())
+                Err(e)
             }
         }
-        // If exist, check.
-        // if not the same, delete, then create
+    }
 
-        //  If not exist, create.
+    // Should this take a be_txn?
+    pub fn internal_assert_or_create(&self, audit: &mut AuditScope, e: Entry) -> Result<(), OperationError> {
+        // If exists, ensure the object is exactly as provided
+        // else, if not exists, create it. IE no extra or excess
+        // attributes and classes.
+
+        // Create a filter from the entry for assertion.
+        let filt = match e.filter_from_attrs(&vec![String::from("name"), String::from("uuid")]) {
+            Some(f) => f,
+            None => return Err(OperationError::FilterGeneration),
+        };
+
+        // Does it exist? (TODO: Should be search, not exists ...)
+        match self.internal_exists(audit, filt) {
+            Ok(true) => {
+                // it exists. We need to ensure the content now.
+                unimplemented!()
+            }
+            Ok(false) => {
+                // It does not exist. Create it.
+                self.internal_create(audit, vec![e])
+            }
+            Err(e) => {
+                // An error occured. pass it back up.
+                Err(e)
+            }
+        }
     }
 
     // These are where searches and other actions are actually implemented. This
     // is the "internal" version, where we define the event as being internal
     // only, allowing certain plugin by passes etc.
 
-    pub fn internal_create(qs: &QueryServer) -> Result<(), ()> {
-        // This will call qs.create(), after we generate a createEvent with internal
-        // types etc.
-        unimplemented!()
+    pub fn internal_create(&self, audit: &mut AuditScope, entries: Vec<Entry>) -> Result<(), OperationError> {
+        // Start the audit scope
+        let mut audit_int = AuditScope::new("internal_create");
+        // Create the CreateEvent
+        let ce = CreateEvent::new_internal(entries);
+        let res = self.create(&mut audit_int, &ce);
+        audit.append_scope(audit_int);
+        res
     }
 
     pub fn commit(mut self, audit: &mut AuditScope) -> Result<(), ()> {