carlos / platform Public

Design for amadan #232 (instance create door: one app can claim a hostname another app holds, race and aliases).

Spec: docs/superpowers/specs/2026-10-06-host-ownership-design.md, rev 5 at 27903735.

Model (Paul's ruling 2026-10-06): domains/<host>.json is the single ownership authority for every hostname family, acquired If-None-Match, with immutable acquisition ids and pending -> committed -> releasing states, every update and delete conditional. The lifecycle claim (rev 6.16) keeps execution, parking and retirement, bound to the acquisition; it is never deleted. Release follows lifecycle retirement and is recoverable. Detach dispatches by family. A per-app owned/ index gives purge complete enumeration. App rows carry an incarnation. Boxes read a console-published alias index. Migration is a freeze with an observed drain, a box-published route inventory, reconciliation with quarantine, and operator resolution.

Review: revs 1-3 were the retired two-family design (Astra rounds 1-3). Rev 4 was the single-object rewrite; round 4 found 5 P1, 11 P2, 1 P3; rev 5 answers all seventeen and has not been reviewed. Section 6 lists six asks of the lifecycle spec for platform-1e. Section 13 has the open questions.