amadan
fix/fleet-runtime-snapshot-20261018
Concurrent fleet reloads could publish credentials and account ownership from different reads, and a tunnel handshake could insert a credential after detach or rotation. This change reads one registry snapshot, publishes one immutable credential/fleet/account tuple, serializes the fleet read and install, and rechecks the credential before connection insertion. Detach removes the exact dynamic connection under the hub lock and closes its captured raw connection afterward. Channel-derived fleet identity remains enforced. Existing static-channel behavior and established-session rotation behavior are preserved.
Exact candidate: 04980e747305b821a7a58f6f2e1fa26352ec9861, based on verified9409. Actual Opus code and bounded composition review ACCEPT; F1-F3 closed, C1-C9 retained. Focused and full edge/registry normal/race tests pass; pre-fix regressions and guard mutants are preserved. Exact source Amadan CI passed gate, all5cross and MinIO contract. Local build/vet/gofmt/launchctx/nonconsole/all5cross passed, and independently rebuilt console binary matches. Complete local console coverage and independent audit PASS under Paul's explicit disk-backed FULL-durability host exception:2060top-level/2794started cases,734nested and5fuzz seeds, only known opt-in preview/demo skips. Feature review211 advanced by fast-forward to exact04980; destinationCI also PASS. Checkpoint notes/backend-integration-04980e74-checkpoint-20261018.json SHAafeb49b84f16026c6b7a5b8c1d59bf63c50a66d4867bf2a0d65b03ff768063f0.
No migration, projection, grant, new policy, provider wiring, billing activation, deployment or main merge. Broader fleet projection/runtime admission and discovery remain held. Concurrent route-map Reload ordering is a separate pre-existing issue. Original monolithic failures and superseded candidate results remain preserved; no timeout/durability/gate-code changes or crash/power-loss claim.
Evidence: notes/fleet-runtime-code-manifest-round3-20261018.json SHA3c61240332665ed26f41d551cbc85c9b16d37c7a22a016de263ca9e735101939; actual review logs/opus-fleet-runtime-code-review-round3-20261018.json SHAb976b89612f4f3cfc830f60524b521ae16f41a41d847cab7de938ff4e358c153 under /home/paulca/.local/share/carloku-paid-launch-20260930.
Discussions 1 open
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed 04980e747 Preserve channel-derived fleet identity in runtime snapshots
- paul@keymail.dev opened Keep fleet credentials and tenancy consistent during reloads
- claude agent, operated by paul@keymail.dev pushed 472458e4e Keep fleet credentials and account authority in one runtime snapshot
- claude agent, operated by paul@keymail.dev pushed 9409c76ff Add reviewed sponsored usage observation API and CLI
- claude agent, operated by paul@keymail.dev pushed 945616c3b Add reviewed sponsored cohort operator API and CLI
- claude agent, operated by paul@keymail.dev pushed 4a9649218 Record inert operator-reviewed sponsorship enrollment
- claude agent, operated by paul@keymail.dev pushed 9fa0af01f Add read-only sponsored candidate inventory prerequisite
- claude agent, operated by paul@keymail.dev pushed b58b6610e Strengthen namespace candidate signer and binding boundary tests
- claude agent, operated by paul@keymail.dev pushed 26a35228f Add unmounted captured AWS namespace candidate and signup binding
- claude agent, operated by paul@keymail.dev pushed a7ce3b523 Add unmounted canonical signup scope codec
- claude agent, operated by paul@keymail.dev pushed 491428a2e Close registry handles owned by console test fixtures
- claude agent, operated by paul@keymail.dev pushed f71540f0d Test signup completion freshness and account helper callers
- claude agent, operated by paul@keymail.dev pushed 47d5e8c1e Preserve signup birth evidence and immutable consent receipts
- claude agent, operated by paul@keymail.dev pushed eb2291399 fix(console): apply durable SQLite settings on every connection
- claude agent, operated by paul@keymail.dev pushed ed256537a Join listener closure and carry deterministic gate fixtures
- claude agent, operated by paul@keymail.dev pushed 2e489fd1b Preserve lifecycle intent without enabling residency
- claude agent, operated by paul@keymail.dev pushed 0797d9beb Refuse incomplete instance record sets before steering
- claude agent, operated by paul@keymail.dev pushed bbeefbc51 Add snapshot-only admission attempt observation
- claude agent, operated by paul@keymail.dev pushed ed7aa593b Integrate reviewed storage ownership, retry and buffered read bounds
- claude agent, operated by paul@keymail.dev pushed c2cc02e21 Bound each buffered storage read without capping whole sweeps
- claude agent, operated by paul@keymail.dev pushed 8fe67311f Add inert resource budgets with consent-bound reservations and evidence holds
- claude agent, operated by paul@keymail.dev pushed fb0c6dfc2 Bound storage sweeps by midnight and verify conflicting publications
- claude agent, operated by paul@keymail.dev pushed 2a40fed0b Integrate metering and opt-in checkpoints with canonical launch terms
- claude agent, operated by paul@keymail.dev pushed fc99f7fb6 Hold mixed-version invoice months for review and bound legacy catalogs
- claude agent, operated by paul@keymail.dev pushed 78d95cc67 Bind preference state to versioned immutable receipt history
- claude agent, operated by paul@keymail.dev pushed a1177cde8 Make admission association deadline tests deterministic
- claude agent, operated by paul@keymail.dev pushed d504567a1 Pin historical partial invoice fixture to its original terms
- claude agent, operated by paul@keymail.dev pushed 44cdddb85 Persist inert overage preferences with ordered immutable receipts
- claude agent, operated by paul@keymail.dev pushed 7b14d6a5d Reuse reviewed CLI and socket fixture isolation for allowance gate
- claude agent, operated by paul@keymail.dev pushed 5b1d7c02f Version approved pooled awake allowances and preserve historical terms