amadan
design-moves-any-region
Move-any-app Phase 1: the approved design, now spec rev 7.19 (P7 cold-only per claim rev 6.27 §1.1; region HA L14 to L17 folded in; L18 stated as a limit), its executable model (internal/sim/hostlife, 9c417aaa), and the implementation plan series rev 3 (docs/superpowers/plans/2026-10-06-moves-phase1-0-index.md and plans 1 to 7, d5716bf4).
Rev 3 answers Astra's plan review round 2 (CODEX-PLAN-MOVES-PHASE1-R2.md beside the plans): every finding local to the moves plans is fixed; the ones that need claim Plans 5, 6 and 8 are written as the BLOCKED-ON-CLAIM contracts C1 to C8 in the index, with platform-1e's work order. Decision D6: no new park kind; staging lanes are park-replica scoped to moves/<host>/<op id>, retired locations are park-replica, a landing's residue is park-generation per generation, all under parked/ with the op in the manifest (spec §6.4's superseded/ wording becomes a rev 7.20 amendment). D13: everything is behind CARLOSMOVESPHASE1, off by default. Region HA conflicts and claim changes are in 2026-10-06-moves-region-ha-conflicts.md.
No roll. The next review is after claim Plans 5, 6 and 8 merge, against their real code.
Commits
92
Files changed
34
+29375 −0
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed fbdad3813 plans: Plan 1 rev 7 (the round-6 Plan 1 review's 9 findings): reader fields in Task 4 and Task 12 before 7b in the build order; boxidtest without the import cycle; preparing-stage authority from the claim and SourceReport.Release, with the hardened-box relay test; the carlos.prev.allowed verdict compared by cmp in ExecStart (no % or $), judged in Go by ReleaseAtOrAbove and withheld under a hold; activationAllowed covers every activating downgrade; Open requires EOF after the final chunk; shadowing collected where the carried .env overrides the rendered config; commit boundaries aligned; index D3, D4 and the cache rule corrected
- claude agent, operated by paul@keymail.dev pushed be14f2dd0 plans: claim Plan 6 is on main (d649d8d4): Plan 1 imports provision.MoveInputs and defines nothing shared; Plans 2 and 3 import InstallManifest and ErrAttemptOver; build target main at d649d8d4 or later; C1-C4 marked landed in the contract table; main line numbers re-checked at d649d8d4
- claude agent, operated by paul@keymail.dev pushed 296807a2a plans: Plan 1 rev 6 (the round-5 Plan 1 review's 14 findings): no undefined or duplicate identifiers in the task sequence (floor.go and check.go in Task 1, InstanceStoreEnv in provision, MoveGuardedCut(g)); the root staging relay validates every request component and asks heldStageAuthority before any filesystem effect; the floor is armed on disk by root before staging and enforced at executable selection by the units (prev_ok over carlos.prev.version), with the door admitting only boxes whose edges files show the armed floor and a prev_release at or above it; the dormant boundary is the floor object, not the switch; StageBlocked reused; production-shaped fleet fixtures via boxidtest; the source bound to the claim's executor; multipart receipts carry versions; Ready matches input identities; RequireReleasedMove for the abort replay; no dir-store lease fallback; Verify releases its producer; commit file sets complete
- claude agent, operated by paul@keymail.dev pushed e1d7c3f1b spec rev 7.22 (joint round 19, R19-1): the prepared files manifest is placed under and bound to the installation's prepared destination generation (g-<move id>, or g-<rollback id> for a dirty return), never holder.generation, which stays the source's until admission; install.json keys named (snapshot_txid for N); Plan 2 Task 10 local step (6) and Task 8 match; index C8
- claude agent, operated by paul@keymail.dev pushed 0a4cadd10 plans: install.json carries claim Plan 6's snake_case keys (v, op, host, n or snapshot_txid, snapshot_*, anchor_*, integrity_check, db_sha256, built_at); Plan 2 Task 8 expects and tests them; spec §7.6 to name them at the round-19 touch
- claude agent, operated by paul@keymail.dev pushed b78b3278c plans: shared contract types with claim Plan 6 Task 6 (feat/hostclaim-box bf63e250): moves.InstallManifest, moves.ErrAttemptOver and provision.MoveInputs are imported, not redefined, when their contract file is on main; shapes verified identical; index table
- claude agent, operated by paul@keymail.dev pushed 80647eeb9 plans: Plan 1 rev 5 (the round-4 Plan 1 review's 15 findings): selectMoveBoxes composes every input of eligibleBoxes/chooseBox; moves.Check in Task 1; the guard hands the signer its own timestamp; ReplicaSource normalizes the claim location; the hold-prev marker covers the units' direct carlos.prev exec; T7 relays through the root stage pass and the floor file moves under /data; s3Mirror stays unversioned; Verify hashes the decoded tar and drains to Open's verdict; valid claim fixtures and a plain-PUT leasetest server; advisory CARLOS_PURGE; ServeUncached for S1; LoadMergedHostVersions and SourceReport.Archive; the store binding, not the policy; inventory M-C1..M-C22; D9 and Task 14 reconciled with D13
- claude agent, operated by paul@keymail.dev pushed 819c8d067 spec rev 7.21 (joint round 18): the prepared files manifest mirrors claim rev 6.30 (73b1b9dc; R18-1), "before its flip" is before the record enters landing through the flip CAS (R18-2), M-C22 promises retained data and pending recovery, not zero loss (R18-4); Plan 2 Task 10 local step (6); index C8 names the prepared-manifest build
- claude agent, operated by paul@keymail.dev pushed d09077470 plans: the Plan 1 review findings (round 3), committed unedited
- claude agent, operated by paul@keymail.dev pushed 644fd1770 plans: Plan 1 rev 4 (the Plan 1 review's 14 findings): the switch lands first and off keeps the legacy path; MoveGuard from Task 2; SigV4 signing by hand; plain mirroring kept; the source copy bound to the claim's generation; one guarded write path; archive Verify and exact modes; agentOwnedVars composition; hold_op before the floor; chooseBox and the one-box refusal; RenderHeld, MaterializeHeld and strict spawns in Plan 1
- claude agent, operated by paul@keymail.dev pushed cc30c2bf5 spec rev 7.20 (claim rev 6.28: the fence reference, the pre-flip source conversion to relocating, L13 files manifest, one-box scope); model: fence-converts-moving and wFenceConvertsMoving; plans: contract owners, D15, D16
- claude agent, operated by paul@keymail.dev pushed d5716bf4b spec rev 7.19 (P7 cold-only, region HA L14 to L17 folded, L18 stated as a limit); plans rev 3 (review round 2, 25 findings and the round-1 partials)
- claude agent, operated by paul@keymail.dev pushed da2832aa6 plans: moves Phase 1 review round 1 (Astra on 616f2499): all 32 findings fixed, findings committed unedited
- claude agent, operated by paul@keymail.dev pushed 6b1a52af7 plans: moves Phase 1 self-review fixes (private storage from the manifest, console edges struct name, ErrNoCgroup, create-only Put, local park destination, operator test helper)
- claude agent, operated by paul@keymail.dev pushed 616f24991 plans: moves Phase 1 implementation plans 0 to 7 (spec rev 7.18 a4711728, main 67547f5)
- claude agent, operated by paul@keymail.dev pushed a47117287 spec: move-any-app rev 7.18, joint round 17's two P3s
- claude agent, operated by paul@keymail.dev pushed 9c417aaa6 hostlife model: rev 7.18, joint round 17 (R17-1)
- claude agent, operated by paul@keymail.dev pushed 39904c84f spec: move-any-app rev 7.17, joint round 16, claim rev 6.24 and 6.25
- claude agent, operated by paul@keymail.dev pushed b9e977832 hostlife model: rev 7.17, joint round 16 and claim rev 6.24
- claude agent, operated by paul@keymail.dev pushed 6f2a93c91 spec: move-any-app rev 7.16, joint round 15 and claim rev 6.23
- claude agent, operated by paul@keymail.dev pushed 6bfae1530 hostlife model: rev 7.16, joint round 15 and claim rev 6.23
- claude agent, operated by paul@keymail.dev pushed 63fc6a711 spec: move-any-app rev 7.15, joint round 14
- claude agent, operated by paul@keymail.dev pushed f6fb05799 hostlife model: rev 7.15, joint round 14
- claude agent, operated by paul@keymail.dev pushed a43892802 spec: move-any-app rev 7.14, joint round 13 and claim rev 6.22
- claude agent, operated by paul@keymail.dev pushed 4ebfa0a53 hostlife model: rev 7.14, joint round 13 and claim rev 6.22
- claude agent, operated by paul@keymail.dev pushed 1f511c422 spec: move-any-app rev 7.13, joint round 12 and claim rev 6.14
- claude agent, operated by paul@keymail.dev pushed 42af7bfc4 hostlife model: the legacy host's pre-release processes carry adoption's session
- claude agent, operated by paul@keymail.dev pushed 8cdc8bbbe hostlife model: two faults the 100,000-seed baseline found on rev 7.13
- claude agent, operated by paul@keymail.dev pushed a2dc9b2a9 hostlife model: rev 7.13, joint round 12 and claim rev 6.14
- claude agent, operated by paul@keymail.dev pushed dd3e35f6f spec: move-any-app rev 7.12: joint round 11, holder.admissions and PublishGeneration (claim rev 6.12), every number rerun (#175)