carlos / platform Public

Commits

• fbdad3813 plans: Plan 1 rev 7 (the round-6 Plan 1 review's 9 findings): reader fields in Task 4 and Task 12 before 7b in the build order; boxidtest without the import cycle; preparing-stage authority from the claim and SourceReport.Release, with the hardened-box relay test; the carlos.prev.allowed verdict compared by cmp in ExecStart (no % or $), judged in Go by ReleaseAtOrAbove and withheld under a hold; activationAllowed covers every activating downgrade; Open requires EOF after the final chunk; shadowing collected where the carried .env overrides the rendered config; commit boundaries aligned; index D3, D4 and the cache rule corrected claude agent, operated by paul@keymail.dev 2 weeks ago
• be14f2dd0 plans: claim Plan 6 is on main (d649d8d4): Plan 1 imports provision.MoveInputs and defines nothing shared; Plans 2 and 3 import InstallManifest and ErrAttemptOver; build target main at d649d8d4 or later; C1-C4 marked landed in the contract table; main line numbers re-checked at d649d8d4 claude agent, operated by paul@keymail.dev 2 weeks ago
• 296807a2a plans: Plan 1 rev 6 (the round-5 Plan 1 review's 14 findings): no undefined or duplicate identifiers in the task sequence (floor.go and check.go in Task 1, InstanceStoreEnv in provision, MoveGuardedCut(g)); the root staging relay validates every request component and asks heldStageAuthority before any filesystem effect; the floor is armed on disk by root before staging and enforced at executable selection by the units (prev_ok over carlos.prev.version), with the door admitting only boxes whose edges files show the armed floor and a prev_release at or above it; the dormant boundary is the floor object, not the switch; StageBlocked reused; production-shaped fleet fixtures via boxidtest; the source bound to the claim's executor; multipart receipts carry versions; Ready matches input identities; RequireReleasedMove for the abort replay; no dir-store lease fallback; Verify releases its producer; commit file sets complete claude agent, operated by paul@keymail.dev 2 weeks ago
• e1d7c3f1b spec rev 7.22 (joint round 19, R19-1): the prepared files manifest is placed under and bound to the installation's prepared destination generation (g-<move id>, or g-<rollback id> for a dirty return), never holder.generation, which stays the source's until admission; install.json keys named (snapshot_txid for N); Plan 2 Task 10 local step (6) and Task 8 match; index C8 claude agent, operated by paul@keymail.dev 2 weeks ago
• 0a4cadd10 plans: install.json carries claim Plan 6's snake_case keys (v, op, host, n or snapshot_txid, snapshot_*, anchor_*, integrity_check, db_sha256, built_at); Plan 2 Task 8 expects and tests them; spec §7.6 to name them at the round-19 touch claude agent, operated by paul@keymail.dev 2 weeks ago
• b78b3278c plans: shared contract types with claim Plan 6 Task 6 (feat/hostclaim-box bf63e250): moves.InstallManifest, moves.ErrAttemptOver and provision.MoveInputs are imported, not redefined, when their contract file is on main; shapes verified identical; index table claude agent, operated by paul@keymail.dev 2 weeks ago
• 80647eeb9 plans: Plan 1 rev 5 (the round-4 Plan 1 review's 15 findings): selectMoveBoxes composes every input of eligibleBoxes/chooseBox; moves.Check in Task 1; the guard hands the signer its own timestamp; ReplicaSource normalizes the claim location; the hold-prev marker covers the units' direct carlos.prev exec; T7 relays through the root stage pass and the floor file moves under /data; s3Mirror stays unversioned; Verify hashes the decoded tar and drains to Open's verdict; valid claim fixtures and a plain-PUT leasetest server; advisory CARLOS_PURGE; ServeUncached for S1; LoadMergedHostVersions and SourceReport.Archive; the store binding, not the policy; inventory M-C1..M-C22; D9 and Task 14 reconciled with D13 claude agent, operated by paul@keymail.dev 2 weeks ago
• 819c8d067 spec rev 7.21 (joint round 18): the prepared files manifest mirrors claim rev 6.30 (73b1b9dc; R18-1), "before its flip" is before the record enters landing through the flip CAS (R18-2), M-C22 promises retained data and pending recovery, not zero loss (R18-4); Plan 2 Task 10 local step (6); index C8 names the prepared-manifest build claude agent, operated by paul@keymail.dev 2 weeks ago
• d09077470 plans: the Plan 1 review findings (round 3), committed unedited claude agent, operated by paul@keymail.dev 2 weeks ago
• 644fd1770 plans: Plan 1 rev 4 (the Plan 1 review's 14 findings): the switch lands first and off keeps the legacy path; MoveGuard from Task 2; SigV4 signing by hand; plain mirroring kept; the source copy bound to the claim's generation; one guarded write path; archive Verify and exact modes; agentOwnedVars composition; hold_op before the floor; chooseBox and the one-box refusal; RenderHeld, MaterializeHeld and strict spawns in Plan 1 claude agent, operated by paul@keymail.dev 2 weeks ago
• cc30c2bf5 spec rev 7.20 (claim rev 6.28: the fence reference, the pre-flip source conversion to relocating, L13 files manifest, one-box scope); model: fence-converts-moving and wFenceConvertsMoving; plans: contract owners, D15, D16 claude agent, operated by paul@keymail.dev 2 weeks ago
• d5716bf4b spec rev 7.19 (P7 cold-only, region HA L14 to L17 folded, L18 stated as a limit); plans rev 3 (review round 2, 25 findings and the round-1 partials) claude agent, operated by paul@keymail.dev 2 weeks ago
• da2832aa6 plans: moves Phase 1 review round 1 (Astra on 616f2499): all 32 findings fixed, findings committed unedited claude agent, operated by paul@keymail.dev 2 weeks ago
• 6b1a52af7 plans: moves Phase 1 self-review fixes (private storage from the manifest, console edges struct name, ErrNoCgroup, create-only Put, local park destination, operator test helper) claude agent, operated by paul@keymail.dev 2 weeks ago
• 616f24991 plans: moves Phase 1 implementation plans 0 to 7 (spec rev 7.18 a4711728, main 67547f5) claude agent, operated by paul@keymail.dev 2 weeks ago
• a47117287 spec: move-any-app rev 7.18, joint round 17's two P3s claude agent, operated by paul@keymail.dev 2 weeks ago
• 9c417aaa6 hostlife model: rev 7.18, joint round 17 (R17-1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 39904c84f spec: move-any-app rev 7.17, joint round 16, claim rev 6.24 and 6.25 claude agent, operated by paul@keymail.dev 2 weeks ago
• b9e977832 hostlife model: rev 7.17, joint round 16 and claim rev 6.24 claude agent, operated by paul@keymail.dev 2 weeks ago
• 6f2a93c91 spec: move-any-app rev 7.16, joint round 15 and claim rev 6.23 claude agent, operated by paul@keymail.dev 2 weeks ago
• 6bfae1530 hostlife model: rev 7.16, joint round 15 and claim rev 6.23 claude agent, operated by paul@keymail.dev 2 weeks ago
• 63fc6a711 spec: move-any-app rev 7.15, joint round 14 claude agent, operated by paul@keymail.dev 2 weeks ago
• f6fb05799 hostlife model: rev 7.15, joint round 14 claude agent, operated by paul@keymail.dev 2 weeks ago
• a43892802 spec: move-any-app rev 7.14, joint round 13 and claim rev 6.22 claude agent, operated by paul@keymail.dev 2 weeks ago
• 4ebfa0a53 hostlife model: rev 7.14, joint round 13 and claim rev 6.22 claude agent, operated by paul@keymail.dev 2 weeks ago
• 1f511c422 spec: move-any-app rev 7.13, joint round 12 and claim rev 6.14 claude agent, operated by paul@keymail.dev 2 weeks ago
• 42af7bfc4 hostlife model: the legacy host's pre-release processes carry adoption's session claude agent, operated by paul@keymail.dev 2 weeks ago
• 8cdc8bbbe hostlife model: two faults the 100,000-seed baseline found on rev 7.13 claude agent, operated by paul@keymail.dev 2 weeks ago
• a2dc9b2a9 hostlife model: rev 7.13, joint round 12 and claim rev 6.14 claude agent, operated by paul@keymail.dev 2 weeks ago
• dd3e35f6f spec: move-any-app rev 7.12: joint round 11, holder.admissions and PublishGeneration (claim rev 6.12), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
• af9b89ed5 sim: hostlife: an empty dead generation still gets its park-generation chore claude agent, operated by paul@keymail.dev 2 weeks ago
• 18d977ae9 sim: hostlife: clean-return coverage speaks for two sessions; per-region coverage in PublishGeneration; a probe's failing restore ends its attempt claude agent, operated by paul@keymail.dev 2 weeks ago
• b6ed9f6fc sim: hostlife: claim rev 6.12, holder.admissions, PublishGeneration, Coverage, the origin's absent marker, the final recovery admission, a probe attempt's window (rev 7.12) claude agent, operated by paul@keymail.dev 2 weeks ago
• ec9824368 spec: move-any-app rev 7.11: joint round 10, the admitting CAS before the start (claim rev 6.10), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
• bd1587a14 sim: hostlife: mutate.sh learns the rare-at-depth outcome; hostguard, stale-hold-release and strict-spawn are caught at 30,000 claude agent, operated by paul@keymail.dev 2 weeks ago
• 8cbd85585 sim: hostlife: an adopted host's writer_box is the box running its pre-release process claude agent, operated by paul@keymail.dev 2 weeks ago
• d076b6568 sim: hostlife: a clean return behind a declared-lost target declares the source's cut session too claude agent, operated by paul@keymail.dev 2 weeks ago
• d1c7b839b sim: hostlife: a rollback whose target was declared lost declares what the seal held (INV-15's exception) claude agent, operated by paul@keymail.dev 2 weeks ago
• 428fee136 sim: hostlife: claim rev 6.10, the admitting CAS before the app start, a session per agent process, unfinished generations with live baselines, the library's admission shape, startup PUTs in the ledger, declarations as the only exemptions, the uncovered return (rev 7.11) claude agent, operated by paul@keymail.dev 2 weeks ago
• 33ce0a9c6 spec: move-any-app rev 7.10: joint round 9, no local database reuse (claim rev 6.9), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
• 572066ece sim: hostlife: a clean close is refused while an escapee runs or when its certificate PUT is not acknowledged; a resumed step carries the stamp active now; strict-spawn caught alone claude agent, operated by paul@keymail.dev 2 weeks ago
• 5b7cf1de8 sim: hostlife: the admitted writer's start is finished by its own agent loop; a prepared landing generation keeps the flip's stamp; a compaction with a full input is full; the return's lagging marker claude agent, operated by paul@keymail.dev 2 weeks ago
• 7a7568c3b sim: hostlife: claim rev 6.9, no local database reuse, warm and cold only, writer_box and writes_lost, admission bound to the operation, close evidence by client outcome (rev 7.10) claude agent, operated by paul@keymail.dev 2 weeks ago
• 831a2ea2b spec: move-any-app rev 7.9: joint round 8, writer sessions (claim rev 6.8, 6.8.1), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
• bdd9d4046 sim: hostlife: the three box-side admission fences alone are an expected miss under writer sessions (claim rev 6.8.1) claude agent, operated by paul@keymail.dev 2 weeks ago
• dfc352ef3 sim: hostlife: an abandoned cold admission is parked by the next op.exec; a writer inside an operation certifies its close; diagnostics claude agent, operated by paul@keymail.dev 2 weeks ago
• 866c5887b sim: hostlife: writer sessions and admission on every path (claim rev 6.8, 6.8.1), the empty generation, provenance, close evidence (rev 7.9) claude agent, operated by paul@keymail.dev 2 weeks ago
• 3c5f742a2 spec: move-any-app rev 7.8: joint round 7, writer epochs (claim rev 6.6), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
• 734a7f5ba sim: hostlife: a crash that takes the disk takes every process with it claude agent, operated by paul@keymail.dev 2 weeks ago
• 0d389d1b6 sim: hostlife: a crash may take the disk, witnesses for evidence-whole-tree and timer-freeze, a nil guard in the clean close claude agent, operated by paul@keymail.dev 3 weeks ago
• 15f2fa100 sim: hostlife: the recovery build takes stop evidence first and reuses a current snapshot on replay claude agent, operated by paul@keymail.dev 3 weeks ago
• 34ddfa439 sim: hostlife: writer epochs (claim rev 6.6), identity oracle, newest level-0, build completion (rev 7.8) claude agent, operated by paul@keymail.dev 3 weeks ago
• de10b969b sim: litestreamfacts: the Store gate asserts its maintenance events and row contents; the unconditional PUT fact (R7-5, R7-1) claude agent, operated by paul@keymail.dev 3 weeks ago
• 05f7250f8 spec: move-any-app rev 7.7: joint round 6, claim rev 6.5 encoded, every number rerun (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 45f934957 sim: hostlife: the cold-restore oracle masks keys of writes declared lost claude agent, operated by paul@keymail.dev 3 weeks ago
• 445628595 sim: hostlife: pure restore oracle, acknowledged anchors, claim rev 6.5 stamps, the budget's verify pass (rev 7.7) claude agent, operated by paul@keymail.dev 3 weeks ago
• 39ddcfbb4 sim: litestreamfacts: exact assertions, anchor replay bytes, the anchored lineage through the Store (R6-2, R6-5) claude agent, operated by paul@keymail.dev 3 weeks ago
• f7f7c4386 spec: move-any-app rev 7.6: joint round 5, the pinned libraries observed, claim rev 6.4 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 50b1e51de sim: hostlife: claim rev 6.4 stamps, sequential level-0 uploads, the legacy location's children (rev 7.6) claude agent, operated by paul@keymail.dev 3 weeks ago
• 29245f697 sim: hostlife: replication position, level-0 anchor, snapshot rotation, claim rev 6.3 stamps (rev 7.6) claude agent, operated by paul@keymail.dev 3 weeks ago
• d96f781cf sim: litestreamfacts: the pinned library's replication, checksum and retention facts (R5-1 to R5-3) claude agent, operated by paul@keymail.dev 3 weeks ago
• cdc98845a spec: move-any-app rev 7.5: joint round 4, claim rev 6.2 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• e08c5fd0d sim: hostlife: a restored database replicates from the TXID it restored to claude agent, operated by paul@keymail.dev 3 weeks ago
• 5de710b2f sim: hostlife: LTX restore, installation stamps, region-qualified live set, purge retirement (rev 7.5) claude agent, operated by paul@keymail.dev 3 weeks ago
• 0e41b685f spec: move-any-app rev 7.4: joint round 3, claim rev 6 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 9108f9583 sim: hostlife: claim rev 6 and the moves side of joint round 3 (rev 7.4) claude agent, operated by paul@keymail.dev 3 weeks ago
• dc7f2a63a spec: move-any-app rev 7.3: deterministic witness scenarios (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• c8562281f sim: hostlife: deterministic purge drain; mutate.sh witness log path claude agent, operated by paul@keymail.dev 3 weeks ago
• c493a988d sim: hostlife: deterministic witness scenarios beside the random sweep (rev 7.3) claude agent, operated by paul@keymail.dev 3 weeks ago
• 0c6058b04 spec: move-any-app rev 7.2: lost-return-park exercised (model 27), CC22 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 4267350ef spec: move-any-app rev 7.1 on claim rev 5.1 (CC20, CC21, model 29) (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 45e16b1d9 sim: hostlife: generation.json written If-Match the marker it supersedes (model 29) claude agent, operated by paul@keymail.dev 3 weeks ago
• 93bf5edb0 sim: hostlife on claim rev 5.1: the purge fence (CC21), and a harness without copies claude agent, operated by paul@keymail.dev 3 weeks ago
• 7e0c025ee spec: move-any-app rev 7, part 2: the gap closed, the final mutation table claude agent, operated by paul@keymail.dev 3 weeks ago
• b26731c45 sim: hostlife: declare-lost parks a return lane the lost target had begun (model 27) claude agent, operated by paul@keymail.dev 3 weeks ago
• 480eb9b50 spec: move-any-app rev 7, part 1: claim rev 5, the sweep's staging scope, CC20 and CC21 claude agent, operated by paul@keymail.dev 3 weeks ago
• d5a6c9b17 sim: hostlife on claim rev 5, with a biased delete-and-recreate schedule claude agent, operated by paul@keymail.dev 3 weeks ago
• 7ac666fe9 spec: move-any-app rev 6, part 2: the strict model's results claude agent, operated by paul@keymail.dev 3 weeks ago
• 7dbfe6c4c spec: move-any-app rev 6, part 1: protocol answers to joint round 2 claude agent, operated by paul@keymail.dev 3 weeks ago
• 47e65af80 sim: hostlife signs staging at the check; C3a and admission-triple rules; expected outcomes claude agent, operated by paul@keymail.dev 3 weeks ago
• eade8ef17 sim: hostlife encodes exactly what the specs say (joint round 2, claim rev 4) claude agent, operated by paul@keymail.dev 3 weeks ago
• df41156c3 Astra joint round 2 findings (claim bf61e6a9 + moves rev 5 4ec3282b + model 7a3e94e7), unedited claude agent, operated by paul@keymail.dev 3 weeks ago
• 4ec3282b9 spec: move-any-app rev 5, on claim rev 3, every model gap exercised (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 7a3e94e7d sim: hostlife exercises rev 4's eight gaps, re-encoded on claim rev 3 (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• a80ff90b4 spec: move-any-app rev 4, checked against the executable model (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 1486345c8 sim: hostlife, an executable joint model of the host lifecycle claim and Phase 1 moves (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 4316db73b Astra joint round 1 findings (claim 653ad4b1 + moves rev 3 6e4d3a0e), unedited claude agent, operated by paul@keymail.dev 3 weeks ago
• 6e4d3a0e1 spec: move-any-app rev 3, on the host lifecycle claim, after Astra round 2 (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• e5b67514e Astra round 2 findings on the move-any-app spec (45b77691), unedited claude agent, operated by paul@keymail.dev 3 weeks ago
• 45b776919 spec: move-any-app rev 2, Phase 1 only, after Astra round 1 (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
• 9fbf4afee Astra round 1 findings on the move-any-app spec (e41c4fef), unedited claude agent, operated by paul@keymail.dev 3 weeks ago
• e41c4fef6 spec: move any app or instance to another region, safely (#175) claude agent, operated by paul@keymail.dev 3 weeks ago