← Branches
feat/carloku-metered-replicator-20261001
Commits
-
e12808113
Review twenty answered: comments scoped to the tenant claims, a depth fixture, and the two refusals that are decisions listed as decisions
claude agent, operated by paul@keymail.dev
-
c9ec11eb1
Twentieth replicator build: a tree claim refuses a tenant's file in a platform directory too; the fixture's guard reachable; the no-recorder refusal quoted
claude agent, operated by paul@keymail.dev
-
53e3dcd84
Nineteenth replicator build: a tenant's file in a platform directory refused in both layouts, the long-target fixture within the pathname budget, refusal messages quoted
claude agent, operated by paul@keymail.dev
-
6249af63e
Eighteenth replicator build, Astra's seventeenth report answered: sections told apart in render, the owner-check comment, the witness test's name, the outstanding item
claude agent, operated by paul@keymail.dev
-
e8211fc6c
Eighteenth replicator build: the link's directory opened as a directory and nothing else, the long-target fixture sized from the temp root
claude agent, operated by paul@keymail.dev
-
bffc76b50
The replicator's seventeenth build: the sixteenth review's findings
claude agent, operated by paul@keymail.dev
-
f306222c2
The replicator's sixteenth build: the fifteenth review's findings
claude agent, operated by paul@keymail.dev
-
03b19014b
The replicator's fifteenth build: the fourteenth review's findings
claude agent, operated by paul@keymail.dev
-
ec55b6391
The replicator's fourteenth build: the thirteenth review's findings
claude agent, operated by paul@keymail.dev
-
90032b613
The replicator's thirteenth build: the twelfth review's findings
claude agent, operated by paul@keymail.dev
-
c8e5e47b4
The replicator's twelfth build: the eleventh review's findings
claude agent, operated by paul@keymail.dev
-
560313169
The replicator's eleventh build: the tenth review's findings
claude agent, operated by paul@keymail.dev
-
9301ed628
The replicator's tenth build: the ninth review's P2 and bounded findings
claude agent, operated by paul@keymail.dev
-
e5e67b253
Metered replicator: the eighth review's two reports
claude agent, operated by paul@keymail.dev
-
142ef5d02
The replicator's ninth build: the eighth review's P1 and bounded findings
claude agent, operated by paul@keymail.dev
-
b5aecf136
The replicator's eighth build: the seventh review's bounded findings
claude agent, operated by paul@keymail.dev
-
6b648c0cf
The replicator's seventh build: the sixth review's bounded findings
claude agent, operated by paul@keymail.dev
-
d63f81dfa
The replicator's sixth build: the fifth review's bounded findings
claude agent, operated by paul@keymail.dev
-
1b3cc29ed
The replicator's fifth build: the fourth review's bounded findings
claude agent, operated by paul@keymail.dev
-
01f2b072b
The unit-file chain climb stops at the platform's own directory
claude agent, operated by paul@keymail.dev
-
b53f2a93e
The replicator's fourth build: the third review's bounded findings
claude agent, operated by paul@keymail.dev
-
4c9cdb3c7
Record the replicator's third review reports (Opus accept with fixes, Astra reject); dispositions follow
claude agent, operated by paul@keymail.dev
-
c86276949
OUTSTANDING item 1 records the replicator's third build
claude agent, operated by paul@keymail.dev
-
9480fe3f4
The replicator's fleet stops sending when ownership changes, holds every day in doubt, and takes one strict inventory of files it has checked
claude agent, operated by paul@keymail.dev
-
357240ccc
The registry keeps an ownership generation that only ownership moves
claude agent, operated by paul@keymail.dev
-
137fd4095
A request gate in the replica client: a refusal stops the attempt before it is sent or counted
claude agent, operated by paul@keymail.dev
-
9c08ce31b
Record the replicator's second review: rejected again, the ownership fence does not hold as built; Close now stops the store
claude agent, operated by paul@keymail.dev
-
6dcb97e5b
The replicator's fleet keeps its store private, names what it skips, refuses what it cannot read, and meters the platform's databases under identities the ledger accepts
claude agent, operated by paul@keymail.dev
-
d16bc80a0
The replicator stops counting when the registry changes: ownership is read under the registry's witness and every request asks it
claude agent, operated by paul@keymail.dev
-
1eace90e7
Ownership is decided on the file, not the spelling of its path; shadow state leaves the tenant's directory
claude agent, operated by paul@keymail.dev
-
b85355c2c
Record the metered replicator's first review: both reviewers reject; nothing fixed yet
claude agent, operated by paul@keymail.dev
-
28a9852aa
WIP: the metered fleet store, refusing anything it cannot meter
claude agent, operated by paul@keymail.dev
-
58f80874d
WIP: name the account that pays for each database the box replicates
claude agent, operated by paul@keymail.dev
-
a4fb842a4
WIP: a metered litestream store with no lease, the first piece of the platform's own replicator
claude agent, operated by paul@keymail.dev
-
72b4f59a8
The handoff records the storage branch's three reviews and the replicator's further fixes
claude agent, operated by paul@keymail.dev
-
218c2a357
The handoff records the storage branch's first review, its fixes and the ruling it needs
claude agent, operated by paul@keymail.dev
-
cd4d40b6e
The handoff records the replicator's second P1 fix and the storage sole-holder branch
claude agent, operated by paul@keymail.dev
-
c68ecddd8
The handoff records the replicator's link fix and the full shared /tmp that failed one gate run
claude agent, operated by paul@keymail.dev
-
8897e9530
The handoff and the outstanding list record the first reviews of all three side branches; none passed
claude agent, operated by paul@keymail.dev
-
551e32c9c
The handoff and the outstanding list record the fencing branch's first review: rejected, and its premise does not bound a whole request
claude agent, operated by paul@keymail.dev
-
c1cf88226
The handoff records cd8821c6 as the last product-code commit with its gate, CI and review state, and the activator test fix on top
claude agent, operated by paul@keymail.dev
-
bac513f6b
activator tests: the recording scripts put their files in place whole
claude agent, operated by paul@keymail.dev
-
cd8821c6d
Close round seventeen: a size is recorded only for the same store that was read before sizing
claude agent, operated by paul@keymail.dev
-
86a1849d7
Close round sixteen: an unmeasured store holds storage for its own account only
claude agent, operated by paul@keymail.dev
-
ff891f390
The handoff names abc9f781 as the code tip with its gate, review and CI state, and makes no claim about later commits
claude agent, operated by paul@keymail.dev
-
abc9f7816
Close round fifteen: nothing reads a retained store's bucket as that store's
claude agent, operated by paul@keymail.dev
-
973a9f157
Close round fourteen: a refused holder is never reconciled away, a scanning re-grant never takes a store back, and the rotation's mark is written at delivery
claude agent, operated by paul@keymail.dev
-
d5705a63e
Close round thirteen: the record's reader and writer refuse a record no walk can follow, and a rotation marks its key change
claude agent, operated by paul@keymail.dev
-
a3f2c15d5
The handoff names d0a21aa1 as the code tip with its gate and CI result; round thirteen is running
claude agent, operated by paul@keymail.dev
-
d0a21aa1e
Close round twelve: one check for records no walk can follow, a delivering mark on the grant, and a member's take-back refused over another account's bucket
claude agent, operated by paul@keymail.dev
-
81ff7c9db
The handoff names 1395f7bf as the code tip with its gate and CI result; round twelve's reports are added
claude agent, operated by paul@keymail.dev
-
1395f7bf9
Close round eleven: a record's provisioned bucket is its bucket, a grant is counted before it touches IAM, a rotation compares the whole estate
claude agent, operated by paul@keymail.dev
-
7bcf7487a
The handoff names 84311b9f as the code tip and round eleven as running
claude agent, operated by paul@keymail.dev
-
84311b9fe
Close round ten: every creating grant is counted before it calls the provider, a deletion note names its bucket, and two sharers of an unsupported name cannot wait on each other
claude agent, operated by paul@keymail.dev
-
366bd5830
Add the round ten review brief; the handoff names 94ca7482 as the code tip
claude agent, operated by paul@keymail.dev
-
94ca74826
Close round nine: a take-back is counted before it creates anything, a grant compares the estate, an unsupported name is not destroyed over another holder
claude agent, operated by paul@keymail.dev
-
6b6d57046
List each approval with its exact scope; refresh the short handoff for the gated tip 3d4104cb
claude agent, operated by paul@keymail.dev
-
f55384672
Add the round nine review brief
claude agent, operated by paul@keymail.dev
-
3d4104cb8
Test the purge's in-sweep rule: a granted record that is in the listing is not swept
claude agent, operated by paul@keymail.dev
-
14d3af890
Close round eight: an estate is not a name, every walk is leased, a purge never sweeps a granted store, a review names its operation
claude agent, operated by paul@keymail.dev
-
5712679ac
Refresh the short handoff for the gated tip c3e87a94
claude agent, operated by paul@keymail.dev
-
c3e87a94b
Give the console's test store the conditional delete both production stores have
claude agent, operated by paul@keymail.dev
-
6fcccecff
Close round seven: the lease covers what a walk acts on, the fence reaches every client, and a held key is two facts
claude agent, operated by paul@keymail.dev
-
b66925492
Record the two late-request defects as defects, with the design that removes them
claude agent, operated by paul@keymail.dev
-
6d377c869
Refresh the short handoff and the outstanding list for the gated tip
claude agent, operated by paul@keymail.dev
-
43383b934
Gate the quantity worker on sandbox proof of its fence; fix the orphan bucket the simulation found
claude agent, operated by paul@keymail.dev
-
c2c02f685
WIP: walk lease and backend fence, quantity send lease and key fence, attestation path A parked
claude agent, operated by paul@keymail.dev
-
058ea506f
Add the round six review brief
claude agent, operated by paul@keymail.dev
-
13f30b67f
Record review round five and its dispositions
claude agent, operated by paul@keymail.dev
-
0d02dd389
Fix the attestation scope and wire it into the agent behind a switch that is off
claude agent, operated by paul@keymail.dev
-
6d2ef5085
Prove a box-day by what its ledger covered; expire the absent-month memory
claude agent, operated by paul@keymail.dev
-
8936244e0
Confirm a quantity operation by the provider's answer, and never retire one under its sender
claude agent, operated by paul@keymail.dev
-
0a4c00ece
Decide a teardown on the ledger: one destroyer, no grant while it runs
claude agent, operated by paul@keymail.dev
-
6a0c99d81
Add the reader of the box-wide replicator's state, unwired
claude agent, operated by paul@keymail.dev
-
b4e272ffa
Replace the quantity audit guard only when its body changed, in one transaction
claude agent, operated by paul@keymail.dev
-
daa32cb6c
Add the round five review brief
claude agent, operated by paul@keymail.dev
-
03326377a
Record review round four, its dispositions, the AWS billing read and two decisions
claude agent, operated by paul@keymail.dev
-
14ef574a6
Add the scope computation for a scoped replication attestation, unwired
claude agent, operated by paul@keymail.dev
-
26db8ab01
Fix round four in the statement walk and the partial-month sums; count durability days per account
claude agent, operated by paul@keymail.dev
-
f60f547fb
Never destroy a bucket another app holds; never resolve a ledger's first hour
claude agent, operated by paul@keymail.dev
-
5f2b4faf5
Start a seat's allowance when its charge starts; bound and retire the proration date
claude agent, operated by paul@keymail.dev
-
4bbe94b6b
Add the round four review brief
claude agent, operated by paul@keymail.dev
-
50e07fcb4
Record review round three, its dispositions, and what the fixes changed
claude agent, operated by paul@keymail.dev
-
c3913dd9f
Bill a partly covered month on its paid days; fix review round three
claude agent, operated by paul@keymail.dev
-
4abe94cbf
Make the quantity worker's operation a compare-and-set the provider enforces
claude agent, operated by paul@keymail.dev
-
e07f64758
Record review round two and the Opus review, their dispositions, and two designs
claude agent, operated by paul@keymail.dev
-
5d64f26af
Fix the findings of review round two and of the Opus production review
claude agent, operated by paul@keymail.dev
-
ae8c911aa
Refresh the handoff and the billing preview after the review fixes
claude agent, operated by paul@keymail.dev
-
8e7499ae5
Fix the ten findings of the independent review
claude agent, operated by paul@keymail.dev
-
1fde082a8
Add the team quantity worker behind an explicit proration policy
claude agent, operated by paul@keymail.dev
-
b448ee542
Add operator doors for billing review holds and the house marker
claude agent, operated by paul@keymail.dev
-
99f1da26f
Record the independent review findings, unedited
claude agent, operated by paul@keymail.dev
-
70bb51140
Record the collector and attestation plans, refresh the audit and handoff
claude agent, operated by paul@keymail.dev
-
de2ee4a81
Fold replication writes and AWS-billed store transfer into statements
claude agent, operated by paul@keymail.dev
-
2d55a252e
Prepare the Stripe catalog provisioning plan and print-only script
claude agent, operated by paul@keymail.dev
-
9a3df4fdb
File every unmetered replication fallback as billing incompleteness
claude agent, operated by paul@keymail.dev
-
72a5189c0
objstore: record bucket ownership history for the store-transfer meter
claude agent, operated by paul@keymail.dev
-
8d2e29663
awsbilling: read CUR deliveries and classify charged S3 transfer
claude agent, operated by paul@keymail.dev
-
caa0e4091
Refresh the branch handoff for the overnight checkpoint
claude agent, operated by paul@keymail.dev
-
5d1a26432
Add a tailnet demo of the signup and billing flow with simulated Keymail and Stripe
claude agent, operated by paul@keymail.dev