carlos / platform Public

`region-ha-hostlife-two-box`

Commits

8f95c4e0b Region HA two-box model plan: Astra round 9, ready to build claude agent, operated by paul@keymail.dev 2 weeks ago
1a8ccd44c Region HA two-box model plan: Astra review brief, round 9 claude agent, operated by paul@keymail.dev 2 weeks ago
b278d197b docs: two-box model plan rev 11, Astra round 8: root's stop receipt tracked apart from the recorded positions with the flushing controller's identity, the identity traces over the gate's seeds 1..n, Task 5H and the round 8 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
813bc7e76 Region HA two-box model plan: Astra round 8 findings (2 resolved, 1 P2, 1 P3), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
54a37976a Region HA two-box model plan: Astra review brief, round 8 claude agent, operated by paul@keymail.dev 2 weeks ago
c160de8c1 docs: two-box model plan rev 10, Astra round 7: only a terminated box's volume evidence discharges local cleanup (INV-26 on the operation's discharges), the operator stops only an unrecoverable release, Task 5G and the round 7 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
03eef47ed Region HA two-box model plan: Astra round 7 findings (1 resolved, 2 new P2), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
979c38daa Region HA two-box model plan: Astra review brief, round 7 claude agent, operated by paul@keymail.dev 2 weeks ago
9f49c1a18 docs: two-box model plan rev 9, Astra round 6: a release needs the session's own flush or its recorded positions, every release and flush path compared with 1b-next Task 7, the operator's stop of a target that cannot release, Task 5F and the round 6 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
52e217923 Region HA two-box model plan: Astra round 6 findings (1 resolved, 1 new P2), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
b9d0046da Region HA two-box model plan: Astra review brief, round 6 claude agent, operated by paul@keymail.dev 2 weeks ago
6b83c452b docs: two-box model plan rev 8, Astra round 5: a pending relocation fence holds the regional phase as Worker.Step's early return does, the worker's checks in Worker.Step's order, Task 5E and the round 5 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
b13b66858 Region HA two-box model plan: Astra round 5 findings (3 resolved, 1 new P2), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
56ea4a15d Region HA two-box model plan: Astra review brief, round 5 claude agent, operated by paul@keymail.dev 2 weeks ago
7ae16049b docs: two-box model plan rev 7, Astra round 4: the target named before any pin on every path, PinFailover in the phase predicates, Worker.Start's guards on a failover's start, the entry points compared with 1b-next in order, Task 5D and the round 4 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
da0b7f6ee Region HA two-box model plan: Astra round 4 findings (2 resolved, 3 new P2 fidelity), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
cc69376db Region HA two-box model plan: Astra review brief, round 4 claude agent, operated by paul@keymail.dev 2 weeks ago
f8d4c091e docs: two-box model plan rev 6, Astra round 3: PinFailover's barrier only for an initial failover (explicit flag), converted moves pin before acknowledgement, the completion park described as the model's abstraction, round 3 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
87d444d0d Region HA two-box model plan: Astra round 3 findings (3 resolved, 1 P2, 1 P3), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
ee6e35f38 Region HA two-box model plan: Astra review brief, round 3 claude agent, operated by paul@keymail.dev 2 weeks ago
ab169b712 docs: two-box model plan rev 5, Astra round 2: PinFailover's barrier before the failover's pin (ruling 4 amended), the published-marker crash boundary, the adverse volume under a failover, Task 5C and the round 2 dispositions claude agent, operated by paul@keymail.dev 2 weeks ago
dcf68aa15 Region HA two-box model plan: Astra round 2 findings (7 resolved, 1 partly, 2 new P2), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
64a0a7933 Region HA two-box model plan: Astra review brief, round 2 claude agent, operated by paul@keymail.dev 2 weeks ago
13f56f101 docs: two-box model plan rev 4, Astra round 1: one-box create path restored with trace identity tests, Task 5B for the guards, exact phase matrix and claim §11's remaining witnesses, dispositions and coverage tables claude agent, operated by paul@keymail.dev 2 weeks ago
54fa0c51d Region HA two-box model plan: Astra round 1 findings (1 P1, 7 P2), unedited claude agent, operated by paul@keymail.dev 2 weeks ago
3c74454f7 Region HA two-box model plan: Astra review brief, round 1 claude agent, operated by paul@keymail.dev 2 weeks ago
46cd663cb plans: two-box joint model rev 3, synced to plan 1b-next rev 19: model rulings 14, 16 and 17 now mirror 1b-next rulings 26, 27 and 25 (no-spare and dead-target bounds, every unopened P recorded and parked, files pinned only with instance.key); the finding tests pass because the gaps are closed, four guards reopen them under mutation, and a witness scripts the L21 window failing safe; Task 5A dry-run with the one-box COUNTERS byte-identical claude agent, operated by paul@keymail.dev 2 weeks ago
6d25c54e4 plans: two-box joint model rev 2, synced to plan 1b-next rev 16: thirteen new guards (release deadline, barrier before pinning, pin bound to its claim version and to evidenced emptiness, EnsureLocal, VerifyReceipt, prepared_opened journaled, probe attempts counted first, drains only of hosts with a writer, phase-sensitive exhausted fence, no replacement owing a park-local, regional chores passed at the fence, P's prepared manifest at sequence 0), every L18 case in a one-box and a two-box region, twenty witnesses, findings F1 to F3, and every task dry-run as a patch with the one-box COUNTERS byte-identical claude agent, operated by paul@keymail.dev 2 weeks ago
99a3defee plans: region HA two-box joint model (L18): one or two boxes per region with the one-box sweep byte-identical, relocation by drain through §5.8's phase table, termination with the regional worker's fence, failover, source loss and the replacement table, the files publisher and pin, witnesses and direct tests for every milestone case, the harness's shape and the joint-round brief; Task 1 dry-run against the baseline claude agent, operated by paul@keymail.dev 2 weeks ago
fbdad3813 plans: Plan 1 rev 7 (the round-6 Plan 1 review's 9 findings): reader fields in Task 4 and Task 12 before 7b in the build order; boxidtest without the import cycle; preparing-stage authority from the claim and SourceReport.Release, with the hardened-box relay test; the carlos.prev.allowed verdict compared by cmp in ExecStart (no % or $), judged in Go by ReleaseAtOrAbove and withheld under a hold; activationAllowed covers every activating downgrade; Open requires EOF after the final chunk; shadowing collected where the carried .env overrides the rendered config; commit boundaries aligned; index D3, D4 and the cache rule corrected claude agent, operated by paul@keymail.dev 2 weeks ago
be14f2dd0 plans: claim Plan 6 is on main (d649d8d4): Plan 1 imports provision.MoveInputs and defines nothing shared; Plans 2 and 3 import InstallManifest and ErrAttemptOver; build target main at d649d8d4 or later; C1-C4 marked landed in the contract table; main line numbers re-checked at d649d8d4 claude agent, operated by paul@keymail.dev 2 weeks ago
296807a2a plans: Plan 1 rev 6 (the round-5 Plan 1 review's 14 findings): no undefined or duplicate identifiers in the task sequence (floor.go and check.go in Task 1, InstanceStoreEnv in provision, MoveGuardedCut(g)); the root staging relay validates every request component and asks heldStageAuthority before any filesystem effect; the floor is armed on disk by root before staging and enforced at executable selection by the units (prev_ok over carlos.prev.version), with the door admitting only boxes whose edges files show the armed floor and a prev_release at or above it; the dormant boundary is the floor object, not the switch; StageBlocked reused; production-shaped fleet fixtures via boxidtest; the source bound to the claim's executor; multipart receipts carry versions; Ready matches input identities; RequireReleasedMove for the abort replay; no dir-store lease fallback; Verify releases its producer; commit file sets complete claude agent, operated by paul@keymail.dev 2 weeks ago
e1d7c3f1b spec rev 7.22 (joint round 19, R19-1): the prepared files manifest is placed under and bound to the installation's prepared destination generation (g-<move id>, or g-<rollback id> for a dirty return), never holder.generation, which stays the source's until admission; install.json keys named (snapshot_txid for N); Plan 2 Task 10 local step (6) and Task 8 match; index C8 claude agent, operated by paul@keymail.dev 2 weeks ago
0a4cadd10 plans: install.json carries claim Plan 6's snake_case keys (v, op, host, n or snapshot_txid, snapshot_*, anchor_*, integrity_check, db_sha256, built_at); Plan 2 Task 8 expects and tests them; spec §7.6 to name them at the round-19 touch claude agent, operated by paul@keymail.dev 2 weeks ago
b78b3278c plans: shared contract types with claim Plan 6 Task 6 (feat/hostclaim-box bf63e250): moves.InstallManifest, moves.ErrAttemptOver and provision.MoveInputs are imported, not redefined, when their contract file is on main; shapes verified identical; index table claude agent, operated by paul@keymail.dev 2 weeks ago
80647eeb9 plans: Plan 1 rev 5 (the round-4 Plan 1 review's 15 findings): selectMoveBoxes composes every input of eligibleBoxes/chooseBox; moves.Check in Task 1; the guard hands the signer its own timestamp; ReplicaSource normalizes the claim location; the hold-prev marker covers the units' direct carlos.prev exec; T7 relays through the root stage pass and the floor file moves under /data; s3Mirror stays unversioned; Verify hashes the decoded tar and drains to Open's verdict; valid claim fixtures and a plain-PUT leasetest server; advisory CARLOS_PURGE; ServeUncached for S1; LoadMergedHostVersions and SourceReport.Archive; the store binding, not the policy; inventory M-C1..M-C22; D9 and Task 14 reconciled with D13 claude agent, operated by paul@keymail.dev 2 weeks ago
819c8d067 spec rev 7.21 (joint round 18): the prepared files manifest mirrors claim rev 6.30 (73b1b9dc; R18-1), "before its flip" is before the record enters landing through the flip CAS (R18-2), M-C22 promises retained data and pending recovery, not zero loss (R18-4); Plan 2 Task 10 local step (6); index C8 names the prepared-manifest build claude agent, operated by paul@keymail.dev 2 weeks ago
d09077470 plans: the Plan 1 review findings (round 3), committed unedited claude agent, operated by paul@keymail.dev 2 weeks ago
644fd1770 plans: Plan 1 rev 4 (the Plan 1 review's 14 findings): the switch lands first and off keeps the legacy path; MoveGuard from Task 2; SigV4 signing by hand; plain mirroring kept; the source copy bound to the claim's generation; one guarded write path; archive Verify and exact modes; agentOwnedVars composition; hold_op before the floor; chooseBox and the one-box refusal; RenderHeld, MaterializeHeld and strict spawns in Plan 1 claude agent, operated by paul@keymail.dev 2 weeks ago
cc30c2bf5 spec rev 7.20 (claim rev 6.28: the fence reference, the pre-flip source conversion to relocating, L13 files manifest, one-box scope); model: fence-converts-moving and wFenceConvertsMoving; plans: contract owners, D15, D16 claude agent, operated by paul@keymail.dev 2 weeks ago
d5716bf4b spec rev 7.19 (P7 cold-only, region HA L14 to L17 folded, L18 stated as a limit); plans rev 3 (review round 2, 25 findings and the round-1 partials) claude agent, operated by paul@keymail.dev 2 weeks ago
da2832aa6 plans: moves Phase 1 review round 1 (Astra on 616f2499): all 32 findings fixed, findings committed unedited claude agent, operated by paul@keymail.dev 2 weeks ago
6b1a52af7 plans: moves Phase 1 self-review fixes (private storage from the manifest, console edges struct name, ErrNoCgroup, create-only Put, local park destination, operator test helper) claude agent, operated by paul@keymail.dev 2 weeks ago
616f24991 plans: moves Phase 1 implementation plans 0 to 7 (spec rev 7.18 a4711728, main 67547f5) claude agent, operated by paul@keymail.dev 2 weeks ago
a47117287 spec: move-any-app rev 7.18, joint round 17's two P3s claude agent, operated by paul@keymail.dev 2 weeks ago
9c417aaa6 hostlife model: rev 7.18, joint round 17 (R17-1) claude agent, operated by paul@keymail.dev 2 weeks ago
39904c84f spec: move-any-app rev 7.17, joint round 16, claim rev 6.24 and 6.25 claude agent, operated by paul@keymail.dev 2 weeks ago
b9e977832 hostlife model: rev 7.17, joint round 16 and claim rev 6.24 claude agent, operated by paul@keymail.dev 2 weeks ago
6f2a93c91 spec: move-any-app rev 7.16, joint round 15 and claim rev 6.23 claude agent, operated by paul@keymail.dev 2 weeks ago
6bfae1530 hostlife model: rev 7.16, joint round 15 and claim rev 6.23 claude agent, operated by paul@keymail.dev 2 weeks ago
63fc6a711 spec: move-any-app rev 7.15, joint round 14 claude agent, operated by paul@keymail.dev 2 weeks ago
f6fb05799 hostlife model: rev 7.15, joint round 14 claude agent, operated by paul@keymail.dev 2 weeks ago
a43892802 spec: move-any-app rev 7.14, joint round 13 and claim rev 6.22 claude agent, operated by paul@keymail.dev 2 weeks ago
4ebfa0a53 hostlife model: rev 7.14, joint round 13 and claim rev 6.22 claude agent, operated by paul@keymail.dev 2 weeks ago
1f511c422 spec: move-any-app rev 7.13, joint round 12 and claim rev 6.14 claude agent, operated by paul@keymail.dev 2 weeks ago
42af7bfc4 hostlife model: the legacy host's pre-release processes carry adoption's session claude agent, operated by paul@keymail.dev 2 weeks ago
8cdc8bbbe hostlife model: two faults the 100,000-seed baseline found on rev 7.13 claude agent, operated by paul@keymail.dev 2 weeks ago
a2dc9b2a9 hostlife model: rev 7.13, joint round 12 and claim rev 6.14 claude agent, operated by paul@keymail.dev 2 weeks ago
dd3e35f6f spec: move-any-app rev 7.12: joint round 11, holder.admissions and PublishGeneration (claim rev 6.12), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
af9b89ed5 sim: hostlife: an empty dead generation still gets its park-generation chore claude agent, operated by paul@keymail.dev 2 weeks ago
18d977ae9 sim: hostlife: clean-return coverage speaks for two sessions; per-region coverage in PublishGeneration; a probe's failing restore ends its attempt claude agent, operated by paul@keymail.dev 2 weeks ago
b6ed9f6fc sim: hostlife: claim rev 6.12, holder.admissions, PublishGeneration, Coverage, the origin's absent marker, the final recovery admission, a probe attempt's window (rev 7.12) claude agent, operated by paul@keymail.dev 2 weeks ago
ec9824368 spec: move-any-app rev 7.11: joint round 10, the admitting CAS before the start (claim rev 6.10), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
bd1587a14 sim: hostlife: mutate.sh learns the rare-at-depth outcome; hostguard, stale-hold-release and strict-spawn are caught at 30,000 claude agent, operated by paul@keymail.dev 2 weeks ago
8cbd85585 sim: hostlife: an adopted host's writer_box is the box running its pre-release process claude agent, operated by paul@keymail.dev 2 weeks ago
d076b6568 sim: hostlife: a clean return behind a declared-lost target declares the source's cut session too claude agent, operated by paul@keymail.dev 2 weeks ago
d1c7b839b sim: hostlife: a rollback whose target was declared lost declares what the seal held (INV-15's exception) claude agent, operated by paul@keymail.dev 2 weeks ago
428fee136 sim: hostlife: claim rev 6.10, the admitting CAS before the app start, a session per agent process, unfinished generations with live baselines, the library's admission shape, startup PUTs in the ledger, declarations as the only exemptions, the uncovered return (rev 7.11) claude agent, operated by paul@keymail.dev 2 weeks ago
33ce0a9c6 spec: move-any-app rev 7.10: joint round 9, no local database reuse (claim rev 6.9), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
572066ece sim: hostlife: a clean close is refused while an escapee runs or when its certificate PUT is not acknowledged; a resumed step carries the stamp active now; strict-spawn caught alone claude agent, operated by paul@keymail.dev 2 weeks ago
5b7cf1de8 sim: hostlife: the admitted writer's start is finished by its own agent loop; a prepared landing generation keeps the flip's stamp; a compaction with a full input is full; the return's lagging marker claude agent, operated by paul@keymail.dev 2 weeks ago
7a7568c3b sim: hostlife: claim rev 6.9, no local database reuse, warm and cold only, writer_box and writes_lost, admission bound to the operation, close evidence by client outcome (rev 7.10) claude agent, operated by paul@keymail.dev 2 weeks ago
831a2ea2b spec: move-any-app rev 7.9: joint round 8, writer sessions (claim rev 6.8, 6.8.1), every number rerun (#175) claude agent, operated by paul@keymail.dev 2 weeks ago
bdd9d4046 sim: hostlife: the three box-side admission fences alone are an expected miss under writer sessions (claim rev 6.8.1) claude agent, operated by paul@keymail.dev 2 weeks ago
dfc352ef3 sim: hostlife: an abandoned cold admission is parked by the next op.exec; a writer inside an operation certifies its close; diagnostics claude agent, operated by paul@keymail.dev 2 weeks ago
866c5887b sim: hostlife: writer sessions and admission on every path (claim rev 6.8, 6.8.1), the empty generation, provenance, close evidence (rev 7.9) claude agent, operated by paul@keymail.dev 2 weeks ago
3c5f742a2 spec: move-any-app rev 7.8: joint round 7, writer epochs (claim rev 6.6), every number rerun (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
734a7f5ba sim: hostlife: a crash that takes the disk takes every process with it claude agent, operated by paul@keymail.dev 3 weeks ago
0d389d1b6 sim: hostlife: a crash may take the disk, witnesses for evidence-whole-tree and timer-freeze, a nil guard in the clean close claude agent, operated by paul@keymail.dev 3 weeks ago
15f2fa100 sim: hostlife: the recovery build takes stop evidence first and reuses a current snapshot on replay claude agent, operated by paul@keymail.dev 3 weeks ago
34ddfa439 sim: hostlife: writer epochs (claim rev 6.6), identity oracle, newest level-0, build completion (rev 7.8) claude agent, operated by paul@keymail.dev 3 weeks ago
de10b969b sim: litestreamfacts: the Store gate asserts its maintenance events and row contents; the unconditional PUT fact (R7-5, R7-1) claude agent, operated by paul@keymail.dev 3 weeks ago
05f7250f8 spec: move-any-app rev 7.7: joint round 6, claim rev 6.5 encoded, every number rerun (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
45f934957 sim: hostlife: the cold-restore oracle masks keys of writes declared lost claude agent, operated by paul@keymail.dev 3 weeks ago
445628595 sim: hostlife: pure restore oracle, acknowledged anchors, claim rev 6.5 stamps, the budget's verify pass (rev 7.7) claude agent, operated by paul@keymail.dev 3 weeks ago
39ddcfbb4 sim: litestreamfacts: exact assertions, anchor replay bytes, the anchored lineage through the Store (R6-2, R6-5) claude agent, operated by paul@keymail.dev 3 weeks ago
f7f7c4386 spec: move-any-app rev 7.6: joint round 5, the pinned libraries observed, claim rev 6.4 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
50b1e51de sim: hostlife: claim rev 6.4 stamps, sequential level-0 uploads, the legacy location's children (rev 7.6) claude agent, operated by paul@keymail.dev 3 weeks ago
29245f697 sim: hostlife: replication position, level-0 anchor, snapshot rotation, claim rev 6.3 stamps (rev 7.6) claude agent, operated by paul@keymail.dev 3 weeks ago
d96f781cf sim: litestreamfacts: the pinned library's replication, checksum and retention facts (R5-1 to R5-3) claude agent, operated by paul@keymail.dev 3 weeks ago
cdc98845a spec: move-any-app rev 7.5: joint round 4, claim rev 6.2 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
e08c5fd0d sim: hostlife: a restored database replicates from the TXID it restored to claude agent, operated by paul@keymail.dev 3 weeks ago
5de710b2f sim: hostlife: LTX restore, installation stamps, region-qualified live set, purge retirement (rev 7.5) claude agent, operated by paul@keymail.dev 3 weeks ago
0e41b685f spec: move-any-app rev 7.4: joint round 3, claim rev 6 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
9108f9583 sim: hostlife: claim rev 6 and the moves side of joint round 3 (rev 7.4) claude agent, operated by paul@keymail.dev 3 weeks ago
dc7f2a63a spec: move-any-app rev 7.3: deterministic witness scenarios (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
c8562281f sim: hostlife: deterministic purge drain; mutate.sh witness log path claude agent, operated by paul@keymail.dev 3 weeks ago
c493a988d sim: hostlife: deterministic witness scenarios beside the random sweep (rev 7.3) claude agent, operated by paul@keymail.dev 3 weeks ago
0c6058b04 spec: move-any-app rev 7.2: lost-return-park exercised (model 27), CC22 encoded (#175) claude agent, operated by paul@keymail.dev 3 weeks ago
4267350ef spec: move-any-app rev 7.1 on claim rev 5.1 (CC20, CC21, model 29) (#175) claude agent, operated by paul@keymail.dev 3 weeks ago