← Branches
self-serve-moves-2
Commits
-
5992af097
gate DIAGNOSTIC (remove with #359): sigwho.py is the step's own top process
claude agent, operated by paul@keymail.dev
-
8d4740d00
gate DIAGNOSTIC (remove with #359): sigwho.py names the sender of the SIGTERM
claude agent, operated by paul@keymail.dev
-
b4f4cfb8d
gate: one split package's shards at a time
claude agent, operated by paul@keymail.dev
-
3cae33816
provision: census for the final review's fix round 4
claude agent, operated by paul@keymail.dev
-
d91ad106b
tests: every console test joins its server's detached work (fix round 4, item 2b)
claude agent, operated by paul@keymail.dev
-
1355a2d84
offline return: a panic in the detached index cleanup is contained (fix round 4, item 2a)
claude agent, operated by paul@keymail.dev
-
7a782725c
gate: the probes are reverted; a passing job prints only its package lines
claude agent, operated by paul@keymail.dev
-
34a958a6a
gate PROBE 6 (revert me): root@2 whole shard beside rest
claude agent, operated by paul@keymail.dev
-
205bf0a22
gate PROBE bisect 8 (revert me): root@2 runs 1 of 2 tests
claude agent, operated by paul@keymail.dev
-
b94d87eaa
gate PROBE bisect 7 (revert me): root@2 runs 3 of 5 tests
claude agent, operated by paul@keymail.dev
-
f1b05a28e
provision: census for the final review's fix round 3
claude agent, operated by paul@keymail.dev
-
9ee2cf307
self-serve pass: the journal read is abandoned at its deadline (fix round 3, item 5)
claude agent, operated by paul@keymail.dev
-
294093304
gate PROBE bisect 6 (revert me): root@2 runs 6 of 11 tests
claude agent, operated by paul@keymail.dev
-
d70e2ad25
offline return: the hourly index sweep never waits and lists one bounded page (fix round 3, item 3)
claude agent, operated by paul@keymail.dev
-
a7a3e1317
gate PROBE bisect 5 (revert me): root@2 runs 12 of 23 tests
claude agent, operated by paul@keymail.dev
-
9afe9e977
gate PROBE bisect 4 (revert me): root@2 runs 23 of 46 tests
claude agent, operated by paul@keymail.dev
-
8086be0a3
offline return: the door's index cleanup runs after the bump and the answer (fix round 3, item 2)
claude agent, operated by paul@keymail.dev
-
59a7154cc
gate PROBE bisect 3 (revert me): root@2 runs 47 of 93 tests
claude agent, operated by paul@keymail.dev
-
aaec106b3
gate PROBE bisect 2 (revert me): root@2 runs 94 of 187 tests
claude agent, operated by paul@keymail.dev
-
da4b57a3f
gate PROBE bisect 1 (revert me): root@2 runs 187 of 374 tests
claude agent, operated by paul@keymail.dev
-
d9811bc72
provision: census for the final review's fix round 2
claude agent, operated by paul@keymail.dev
-
e6e4bb7b4
self-serve job: participant pinning and report reads are judged at the pass's clock (fix round 2, item 7)
claude agent, operated by paul@keymail.dev
-
bbaccf928
console start: paging is armed from the start scan's evidence before the bootstrap page (fix round 2, item 6)
claude agent, operated by paul@keymail.dev
-
36ca1bfc4
self-serve pass: the evidence read's deadline covers the journal (fix round 2, item 5)
claude agent, operated by paul@keymail.dev
-
c038dcef7
self-serve job: every attempt of one request writes the same bytes (fix round 2, item 4)
claude agent, operated by paul@keymail.dev
-
0d3763da7
offline return: the hourly store sweep also clears the return index (fix round 2, item 3)
claude agent, operated by paul@keymail.dev
-
1fc116c96
gate PROBE 5 (revert me): run only root@2 beside rest
claude agent, operated by paul@keymail.dev
-
8cf8be398
gate PROBE 4 (revert me): run only root@1 beside rest
claude agent, operated by paul@keymail.dev
-
3d72f99cb
offline return: the door's index cleanup is bounded (fix round 2, item 2)
claude agent, operated by paul@keymail.dev
-
a37de0c47
gate PROBE 3 (revert me): run only root@0 beside rest
claude agent, operated by paul@keymail.dev
-
d0227a681
gate PROBE 2 (revert me): skip the root package's tests as well
claude agent, operated by paul@keymail.dev
-
b4b58a769
offline return: the sweep deletes only the index entry it judged (fix round 2, item 1)
claude agent, operated by paul@keymail.dev
-
eb2904d03
gate PROBE (revert me): skip internal/console entirely to see whether the runner's TERM follows the console tests
claude agent, operated by paul@keymail.dev
-
52b940eef
provision: census for the F6 host half
claude agent, operated by paul@keymail.dev
-
a2abea21a
host: only the selected target answers a return, and the box never deletes the index (final review F6, host half)
claude agent, operated by paul@keymail.dev
-
fcef25ae5
provision: census for the final review's fix round (console half, and the host implementer's re-pins)
claude agent, operated by paul@keymail.dev
-
f7d3fe3c9
docs: the stamp comment and the rollout's switch and recovery-mode consequences (final review F17, bullets 1 and 3)
claude agent, operated by paul@keymail.dev
-
f1e096353
self-serve timings: a copy whose seal was not read has unknown bytes, no sample (final review F16)
claude agent, operated by paul@keymail.dev
-
748dec8b4
offline return: the request names its target and the console owns the index (final review F6, console half)
claude agent, operated by paul@keymail.dev
-
f799f5d0b
offline return: a return request the console cannot read judges nothing (final review F5, console half)
claude agent, operated by paul@keymail.dev
-
893edb7b6
offline return: gofmt the F3 witness
claude agent, operated by paul@keymail.dev
-
bb900ba2c
offline return: the disk rule sizes the data the return brings (final review F3)
claude agent, operated by paul@keymail.dev
-
47567b372
offline return: the door needs the record's proof the forward completed (final review F4)
claude agent, operated by paul@keymail.dev
-
6a2fe8b88
offline abort: before the seal a pinned move waits for its pinned sources (final review F2)
claude agent, operated by paul@keymail.dev
-
76bb21586
self-serve job: a queue request persists its staging coordinates and replays them (final review F10)
claude agent, operated by paul@keymail.dev
-
0f46b2175
self-serve job: a landed write stays owed its serial bump on the row (final review F9)
claude agent, operated by paul@keymail.dev
-
e971dae9e
self-serve job: a superseded round's abandonment sets the replacement's fresh deadline (final review F8)
claude agent, operated by paul@keymail.dev
-
5591ccb25
self-serve pages: an attempt with no sink armed is not a page sent (final review F13)
claude agent, operated by paul@keymail.dev
-
ec91cf9c9
self-serve pass: the start scan and the evidence read are bounded (final review F12)
claude agent, operated by paul@keymail.dev
-
34148e26d
self-serve job: the open record's PUT runs under the lease (final review F11)
claude agent, operated by paul@keymail.dev
-
3e5d6a830
offline reports: the 60-s-ahead filter applies to self-serve moves only (final review F15)
claude agent, operated by paul@keymail.dev
-
e43e415e9
host: the bridge clock's comment names the times it does not move (final review F17, second bullet)
claude agent, operated by paul@keymail.dev
-
5e774b06f
host: an unknown instance id is no negative in the return scan (final review F7)
claude agent, operated by paul@keymail.dev
-
78f67fb4d
offline reservations: two lost races with no holder observed answer the unreadable 502 (final review F14)
claude agent, operated by paul@keymail.dev
-
036528e6e
host: a return request the scan cannot read answers nothing and keeps the index entry (final review F5, host half)
claude agent, operated by paul@keymail.dev
-
eda53b594
self-serve job: queue and start check the very record they bind to (final review F1)
claude agent, operated by paul@keymail.dev
-
f7cfd3299
e2e: the shared job world runs with lifetimes on, as production runs every self-serve move
claude agent, operated by paul@keymail.dev
-
0b27dfb96
e2e: the reclaim witness's empty reason only for the unreadable holder; the recreated and two-moves witnesses say what they leave to other witnesses
claude agent, operated by paul@keymail.dev
-
359a6e9f8
e2e: the claims-off witness reads the instance id as production does: none until the metadata answers, then kept for the process
claude agent, operated by paul@keymail.dev
-
283ffb290
gate: narrate job starts and name the in-flight jobs when a signal stops the gate
claude agent, operated by paul@keymail.dev
-
7fbeecbcf
e2e: one top-level test per boundary so the gate's shard deal can spread the recovery matrix; the e2e default is four shards
claude agent, operated by paul@keymail.dev
-
6d9068957
provision: census for Task 10b: the internal/console and internal/host envelopes re-pinned in place for the two test seams; the seal stands
claude agent, operated by paul@keymail.dev
-
14c73c215
e2e: the operator-doors witness asserts the legacy move door's recorded refusal only
claude agent, operated by paul@keymail.dev
-
ff36030a3
e2e: the operator's doors unchanged on the bridge with the switch off, an operator return after a self-serve move, and the claims-off box's published instance id
claude agent, operated by paul@keymail.dev
-
d3961428d
host: the end-to-end bridge's BoxHandle.OptDir, beside DataDir
claude agent, operated by paul@keymail.dev
-
6d7d4aa1d
e2e: a cut naming a stale id, a host recreated under its row, two moves on shared and disjoint boxes, and the reclaim only on evidence
claude agent, operated by paul@keymail.dev
-
1a8955b15
e2e: the self-serve move through the member's doors: forward, cancel in ready, the four aborts and the post-open warning
claude agent, operated by paul@keymail.dev
-
167669793
console: TestHooks.LifetimesOn turns lifetimes on for an end-to-end witness of the self-serve request door
claude agent, operated by paul@keymail.dev
-
a1ac66fc2
provision: census for Task 9 fix round 2: estimateRules and moveTimings re-pinned in place, the console envelope and the seal
claude agent, operated by paul@keymail.dev
-
2196d917e
console: the dead-letter's comments name the account alone (auditActivityTx resolves no app), and auditActivityTx says its one permanent failure is sql.ErrNoRows on the account
claude agent, operated by paul@keymail.dev
-
4a41b86f8
console: a rated timing that finished inside its fixed part, or within a tick of it, is left out of the rate's median (the default stands until five informative rows exist; the 100 ms clamp is gone); a land or promote row needs its landed bytes; the window's floor is a bound parameter
claude agent, operated by paul@keymail.dev
-
4997a30df
provision: census for Task 9 fix round 1: moveTimings frozen in place of MoveTimings's unruled rows, estimateRules and SetSelfServeReason re-pinned, the console envelope and the seal
claude agent, operated by paul@keymail.dev
-
9e6e600d6
console: the log's event times are Unix seconds like the rest of the self-serve view; only a permanent delivery failure (the account or app cannot be resolved) counts toward the dead-letter, a transient one is retried uncounted; the waiting event is stamped with the tick's clock
claude agent, operated by paul@keymail.dev
-
8082a2280
console: a rate term's rate is measured past its fixed part (bytes / max(seconds - fixed, 100 ms) over rows of at least 1 MiB), and rows under the floor measure the fixed part, so small final copies no longer predict a large replica as hours
claude agent, operated by paul@keymail.dev
-
a1ec926f9
gate: tidy the e2e comment
claude agent, operated by paul@keymail.dev
-
84ff7273e
gate: the e2e witnesses run after every other job, in two shards
claude agent, operated by paul@keymail.dev
-
777a4d42f
provision: census for Task 9: twelve accepted-legacy console units (the timing marks and move_timings, the estimate's medians, the events' reads and dead-letter, the health and reason statements, the status door's ?log=1), five re-pinned in place, the console envelope and the seal; no record write
claude agent, operated by paul@keymail.dev
-
587a79711
console, e2e: the estimate's defaults then medians, the two-minute floor, before and after staging; first-observation marks; no rates from aborted moves; sequenced events delivered once and dead-lettered after five failures; the operator status's self_serve and log; the cut's timings and events end to end
claude agent, operated by paul@keymail.dev
-
109a0b6a8
console: every refusal, fact decision, lane and health probe and new waiting reason is an event in its change's transaction; an event undelivered five times is dead-lettered (attempts, detail undeliverable:, logged once); the operator status shows self_serve and, with ?log=1, the move's events
claude agent, operated by paul@keymail.dev
-
2fb173896
console: the move estimate from the region pair's timings: the median of the last twenty per term once five exist (fixed terms from seconds, rates from bytes/seconds over rows with bytes), else the default
claude agent, operated by paul@keymail.dev
-
cf2cb871f
console: timing marks at the console's first observation, insert-only, with their events; landed_at with the advance into landed; the finaliser derives a done move's five move_timings rows
claude agent, operated by paul@keymail.dev
-
a56979783
gate: the e2e witnesses are dealt across shards (E2E_SHARDS, default 4)
claude agent, operated by paul@keymail.dev
-
9cac4e461
provision: census for Task 8 fix round 1: the return index, the box's open-record read and report, finishSelfServeMove, probeTarget re-pinned; the note corrected (the return step reads judged) and the aborted open records left to plan 4
claude agent, operated by paul@keymail.dev
-
4129ce329
copy gate: MV-O257 and MV-O258 (Task 8 fix round 1, pending)
claude agent, operated by paul@keymail.dev
-
844e603bb
console: a refused seal, flip or open names the step that stopped; the target-left fact is never dropped; the health probe reuses one transport per target address (and its direct test); witnesses narrowed and the lift's order pinned
claude agent, operated by paul@keymail.dev
-
50eeec86f
console: an operator's start of a self-serve staged move takes it: the job yields (aborted, another move is in flight) and leaves the reservations to the operator's clearing door
claude agent, operated by paul@keymail.dev
-
aa692a353
console: return mode applies the free-disk and programs-file rules; a console without a secrets key does not refuse the target's
claude agent, operated by paul@keymail.dev
-
c7e0a8f7c
moves, host, console: the return index: the door writes one region-scoped entry per pending return, the box lists only its region's index once a minute, caches open records and negatives, and removes the entry once it has answered
claude agent, operated by paul@keymail.dev
-
18d9c5c2d
console: the return door joins the route census and the claim fixtures (MV-O20 on a claim console)
claude agent, operated by paul@keymail.dev
-
229711f45
e2e: TestFinaliseResumesAtEveryStep pins the finaliser's order (the outcome before the release, the release before it is recorded)
claude agent, operated by paul@keymail.dev
-
6562a764a
host: the return step reads the instance record judged (TestNoUnjudgedRecordReads) and answers only for the forward's lifetime; census re-pinned
claude agent, operated by paul@keymail.dev
-
1b85241d0
provision: census rows for Task 8 (PROPOSED-self-serve-moves-2): the open record, the return request and report, their readers, five accepted-legacy units, two re-pins
claude agent, operated by paul@keymail.dev
-
9d6c19226
copy gate: rows MV-O237 to MV-O256 (MV-O237 to MV-O242 the plan's Task 8 list, approved by Paul 2026-10-22; the rest pending); Task 8's new files join movesScanFiles
claude agent, operated by paul@keymail.dev
-
748525e42
console: return mode decides the ordinary facts in sentences made only of what the console knows (an operator door speaks them)
claude agent, operated by paul@keymail.dev
-
104761c0c
e2e: the cut, abort, finaliser, paging and operator return witnesses; TestEveryBoundaryRecovers covers the start, seal, flip, open, both finishing gates and the abort after the start
claude agent, operated by paul@keymail.dev
-
a347d45b0
console: an expired open is classified by the fenced record before any abort, so an open that lands in the fence is opened with no abort left behind
claude agent, operated by paul@keymail.dev
-
cbdd6b892
console, provision: operator doors that clear a self-serve move finalise it; the operator return's request door, its report and return mode at the stage and start doors
claude agent, operated by paul@keymail.dev
-
b4d6d7a83
moves, host: the return request and report keys, and the box's return step: a forward source answers the current request with an immutable report of its leftovers
claude agent, operated by paul@keymail.dev
-
4bd6dea24
console: the target's stage path, capabilities and secrets key are checked (sentences pending Paul's review)
claude agent, operated by paul@keymail.dev
-
2c9ec5938
console: the self-serve cut from the barrier to finishing, the no-return boundary at the committed open, open-uncertain decided by the record, the health check, the abort facts without the target, and durable paging
claude agent, operated by paul@keymail.dev
amadan