← Branches
self-serve-moves-3
Commits
-
84917d06e
plan 4 rev 12: the e2e wake fixture carries the real mirror and a fake instance; a path-aware trust seam with a portable declaration; the first-arming witnesses assert the waiting rule
claude agent, operated by paul@keymail.dev
-
ba9d25e1b
plan 4 rev 11: every lock body our code writes carries a per-attempt random write_id so no conditional lock write can ever find a recurring ETag; the agent arms only once root's gate exists; the e2e fixtures get their own task
claude agent, operated by paul@keymail.dev
-
8805b9cd7
plan 4 rev 10: the unmark never reconstructs an earlier lock body (a cleanups counter in the lifted tombstone; the unmark always writes); the ungate verb is gone and the arming markers are permanent
claude agent, operated by paul@keymail.dev
-
2662840eb
plan 4 rev 9: cleanup requires a non-root agent; the arming identity is a persisted nonce; no console rollback across the plan 4 boundary (the drain stays as an operator tool; the clean-shutdown handler and the settlement wait are gone); an unarmed box never writes the reservation table
claude agent, operated by paul@keymail.dev
-
1d2847667
plan 4 rev 8: first arming waits for every pre-arming root pass to end; recovery reloads the allocation under its locks; table writes with one attempt, resent until answered, and a 20-minute settlement wait before a drain completes; a finite retry for cleaning contention; the console gets a clean shutdown
claude agent, operated by paul@keymail.dev
-
f28dee2b2
plan 4 rev 7: the cleaning mark never expires while a delete is in flight; an armed adopt pass publishes nothing without the root pass lock; a drain barrier shared with every admitter; acquisitions only against epoch-bearing bodies; the inventoried latest version must be current
claude agent, operated by paul@keymail.dev
-
476e0f235
plan 4 rev 6: deletes by version id from a full-version inventory; root's step inside the adopt pass under a root-only pass lock; rollback as a drain procedure; log lookup by id; placement registers before acquiring
claude agent, operated by paul@keymail.dev
-
0840937f6
plan 4 rev 5: conditional deletes on the inventoried ETag with a quiet period and a repair pass; active.json never deleted and never repeats a body; no rename-aside, no root removal on the writable layout; lifecycle-wide supersession; untracked lifetimes get no cleanup; fifteen right-sized tasks incl. the CLI log
claude agent, operated by paul@keymail.dev
-
4e8b62e5b
plan 4 rev 4: cleanup excludes admitted work by marking the lifted tombstone; root authority through a host-level callback and root-owned acknowledgements; hostname keys, placement intent, durable release and publication obligations
claude agent, operated by paul@keymail.dev
-
0c33ee545
census: Task 2 review 2 round re-pins (rev3=PROPOSED-self-serve-moves-3)
claude agent, operated by paul@keymail.dev
-
b2c76eff4
edge: one registry listing per watch tick builds both the table and the holds; every table-and-holds reader reads the paired snapshot (Task 2 review 2 round)
claude agent, operated by paul@keymail.dev
-
5f8a63f60
edges: Task 4 fix round 1: a three-way steering read, the home map's field use mapped to its candidate test, untagged and case-folded hosts fields flagged
claude agent, operated by paul@keymail.dev
-
96e01f856
census: Task 2 final fix round re-pins (rev3=PROPOSED-self-serve-moves-3)
claude agent, operated by paul@keymail.dev
-
a0f6cf559
edge: the watch re-bases local holds on an alias's DNS stamp, Reload publishes its table and holds as one snapshot, ExactHome refuses a literal catch-all (Task 2 final fix round)
claude agent, operated by paul@keymail.dev
-
d04ba6b49
self-serve moves: the target's landing hold lists the custom domain, one hold validity test for rank and the e2e seam (Task 7 review round 1)
claude agent, operated by paul@keymail.dev
-
408279cef
self-serve moves: the holding page end to end on a third edge and a custom domain
claude agent, operated by paul@keymail.dev
-
27b630b6b
edge: one notServedHere constant for both refusals, a comment on probes served from the catch-all, and the 103 asserted clean (Task 6 review round 1)
claude agent, operated by paul@keymail.dev
-
9ae9fdaab
console, census and copy: the health probe asks in probe mode and requires the target's box id; plan 3 Task 6 re-pins
claude agent, operated by paul@keymail.dev
-
8582e1c3b
edge: probe mode refuses to forward and stamps the serving box on the final response through the real writer stack
claude agent, operated by paul@keymail.dev
-
e9c26e2dd
edges: every edges-file read site is inventoried, discovered by type, and ignores offline_moves for served-ness
claude agent, operated by paul@keymail.dev
-
1f992d20f
edge: wake witnesses for a losing platform hold beside a ready platform route and a winning hold leaving its file (Task 5 review round 1)
claude agent, operated by paul@keymail.dev
-
fe9c8fc5b
census: plan 3 Task 5's live-hold wake re-pins the internal/edge envelope; no unit moves and the seal is unchanged
claude agent, operated by paul@keymail.dev
-
1a2ebeed3
edge: Task 3 fix round 1: a real (b) check, the model's sizes asserted, alias rows marked platform in the differential, the stamped alias aimed at another target
claude agent, operated by paul@keymail.dev
-
5adafb565
edge: holding entries expire five minutes after their fetch, with today's fallback including wildcards
claude agent, operated by paul@keymail.dev
-
29097d9e0
edge: the wildcard manager wakes when a remote platform hold expires or revives; the wake compares the live holds at each poll's time
claude agent, operated by paul@keymail.dev
-
7772738b8
census: plan 3 Task 3's rank tiebreak re-pins the internal/edge envelope; no unit moves and the seal is unchanged
claude agent, operated by paul@keymail.dev
-
b7dce7bec
edge: the ranking pinned by witnesses, a differential test against the fold and a small-model property test
claude agent, operated by paul@keymail.dev
-
e239b8a3b
edge: one file's holds of different targets for one alias are ranked by target, so the page never depends on collection order
claude agent, operated by paul@keymail.dev
-
8b1437be9
edge: the import gate judges the decision's table; witnesses for the login re-resolution, the fallback's owner and a door outside the fallback (Task 2 fix round 1)
claude agent, operated by paul@keymail.dev
-
d88aaf316
census and copy: plan 3 Task 2's edge and wiring units re-pinned; the holding page's sentences recorded pending Paul
claude agent, operated by paul@keymail.dev
-
d37469eae
host: the local edge subscribes to the armed offline view's holds and takes the box id
claude agent, operated by paul@keymail.dev
-
8fcd14cbd
edge: holds suppress their target's stale publications and the fold decides the rest; one decision and one table per request; local holds in their own snapshot
claude agent, operated by paul@keymail.dev
-
5d7647012
host: a moves pass's failed listing fails only the offline view's holds; the edges file loop loads the view's snapshot once (Task 1 fix round 1)
claude agent, operated by paul@keymail.dev
-
17658338a
edges: explicit alias provenance in the registry and the reconciler; the lifetimes writer publishes held rows as holding entries; the offline view publishes immutable revisioned snapshots
claude agent, operated by paul@keymail.dev
-
5992af097
gate DIAGNOSTIC (remove with #359): sigwho.py is the step's own top process
claude agent, operated by paul@keymail.dev
-
8d4740d00
gate DIAGNOSTIC (remove with #359): sigwho.py names the sender of the SIGTERM
claude agent, operated by paul@keymail.dev
-
b4f4cfb8d
gate: one split package's shards at a time
claude agent, operated by paul@keymail.dev
-
3cae33816
provision: census for the final review's fix round 4
claude agent, operated by paul@keymail.dev
-
d91ad106b
tests: every console test joins its server's detached work (fix round 4, item 2b)
claude agent, operated by paul@keymail.dev
-
1355a2d84
offline return: a panic in the detached index cleanup is contained (fix round 4, item 2a)
claude agent, operated by paul@keymail.dev
-
7a782725c
gate: the probes are reverted; a passing job prints only its package lines
claude agent, operated by paul@keymail.dev
-
34a958a6a
gate PROBE 6 (revert me): root@2 whole shard beside rest
claude agent, operated by paul@keymail.dev
-
205bf0a22
gate PROBE bisect 8 (revert me): root@2 runs 1 of 2 tests
claude agent, operated by paul@keymail.dev
-
b94d87eaa
gate PROBE bisect 7 (revert me): root@2 runs 3 of 5 tests
claude agent, operated by paul@keymail.dev
-
f1b05a28e
provision: census for the final review's fix round 3
claude agent, operated by paul@keymail.dev
-
9ee2cf307
self-serve pass: the journal read is abandoned at its deadline (fix round 3, item 5)
claude agent, operated by paul@keymail.dev
-
294093304
gate PROBE bisect 6 (revert me): root@2 runs 6 of 11 tests
claude agent, operated by paul@keymail.dev
-
d70e2ad25
offline return: the hourly index sweep never waits and lists one bounded page (fix round 3, item 3)
claude agent, operated by paul@keymail.dev
-
a7a3e1317
gate PROBE bisect 5 (revert me): root@2 runs 12 of 23 tests
claude agent, operated by paul@keymail.dev
-
9afe9e977
gate PROBE bisect 4 (revert me): root@2 runs 23 of 46 tests
claude agent, operated by paul@keymail.dev
-
8086be0a3
offline return: the door's index cleanup runs after the bump and the answer (fix round 3, item 2)
claude agent, operated by paul@keymail.dev
-
59a7154cc
gate PROBE bisect 3 (revert me): root@2 runs 47 of 93 tests
claude agent, operated by paul@keymail.dev
-
aaec106b3
gate PROBE bisect 2 (revert me): root@2 runs 94 of 187 tests
claude agent, operated by paul@keymail.dev
-
da4b57a3f
gate PROBE bisect 1 (revert me): root@2 runs 187 of 374 tests
claude agent, operated by paul@keymail.dev
-
d9811bc72
provision: census for the final review's fix round 2
claude agent, operated by paul@keymail.dev
-
e6e4bb7b4
self-serve job: participant pinning and report reads are judged at the pass's clock (fix round 2, item 7)
claude agent, operated by paul@keymail.dev
-
bbaccf928
console start: paging is armed from the start scan's evidence before the bootstrap page (fix round 2, item 6)
claude agent, operated by paul@keymail.dev
-
36ca1bfc4
self-serve pass: the evidence read's deadline covers the journal (fix round 2, item 5)
claude agent, operated by paul@keymail.dev
-
c038dcef7
self-serve job: every attempt of one request writes the same bytes (fix round 2, item 4)
claude agent, operated by paul@keymail.dev
-
0d3763da7
offline return: the hourly store sweep also clears the return index (fix round 2, item 3)
claude agent, operated by paul@keymail.dev
-
1fc116c96
gate PROBE 5 (revert me): run only root@2 beside rest
claude agent, operated by paul@keymail.dev
-
8cf8be398
gate PROBE 4 (revert me): run only root@1 beside rest
claude agent, operated by paul@keymail.dev
-
3d72f99cb
offline return: the door's index cleanup is bounded (fix round 2, item 2)
claude agent, operated by paul@keymail.dev
-
a37de0c47
gate PROBE 3 (revert me): run only root@0 beside rest
claude agent, operated by paul@keymail.dev
-
d0227a681
gate PROBE 2 (revert me): skip the root package's tests as well
claude agent, operated by paul@keymail.dev
-
b4b58a769
offline return: the sweep deletes only the index entry it judged (fix round 2, item 1)
claude agent, operated by paul@keymail.dev
-
eb2904d03
gate PROBE (revert me): skip internal/console entirely to see whether the runner's TERM follows the console tests
claude agent, operated by paul@keymail.dev
-
52b940eef
provision: census for the F6 host half
claude agent, operated by paul@keymail.dev
-
a2abea21a
host: only the selected target answers a return, and the box never deletes the index (final review F6, host half)
claude agent, operated by paul@keymail.dev
-
fcef25ae5
provision: census for the final review's fix round (console half, and the host implementer's re-pins)
claude agent, operated by paul@keymail.dev
-
f7d3fe3c9
docs: the stamp comment and the rollout's switch and recovery-mode consequences (final review F17, bullets 1 and 3)
claude agent, operated by paul@keymail.dev
-
f1e096353
self-serve timings: a copy whose seal was not read has unknown bytes, no sample (final review F16)
claude agent, operated by paul@keymail.dev
-
748dec8b4
offline return: the request names its target and the console owns the index (final review F6, console half)
claude agent, operated by paul@keymail.dev
-
f799f5d0b
offline return: a return request the console cannot read judges nothing (final review F5, console half)
claude agent, operated by paul@keymail.dev
-
893edb7b6
offline return: gofmt the F3 witness
claude agent, operated by paul@keymail.dev
-
bb900ba2c
offline return: the disk rule sizes the data the return brings (final review F3)
claude agent, operated by paul@keymail.dev
-
47567b372
offline return: the door needs the record's proof the forward completed (final review F4)
claude agent, operated by paul@keymail.dev
-
6a2fe8b88
offline abort: before the seal a pinned move waits for its pinned sources (final review F2)
claude agent, operated by paul@keymail.dev
-
76bb21586
self-serve job: a queue request persists its staging coordinates and replays them (final review F10)
claude agent, operated by paul@keymail.dev
-
0f46b2175
self-serve job: a landed write stays owed its serial bump on the row (final review F9)
claude agent, operated by paul@keymail.dev
-
e971dae9e
self-serve job: a superseded round's abandonment sets the replacement's fresh deadline (final review F8)
claude agent, operated by paul@keymail.dev
-
5591ccb25
self-serve pages: an attempt with no sink armed is not a page sent (final review F13)
claude agent, operated by paul@keymail.dev
-
ec91cf9c9
self-serve pass: the start scan and the evidence read are bounded (final review F12)
claude agent, operated by paul@keymail.dev
-
34148e26d
self-serve job: the open record's PUT runs under the lease (final review F11)
claude agent, operated by paul@keymail.dev
-
3e5d6a830
offline reports: the 60-s-ahead filter applies to self-serve moves only (final review F15)
claude agent, operated by paul@keymail.dev
-
e43e415e9
host: the bridge clock's comment names the times it does not move (final review F17, second bullet)
claude agent, operated by paul@keymail.dev
-
5e774b06f
host: an unknown instance id is no negative in the return scan (final review F7)
claude agent, operated by paul@keymail.dev
-
78f67fb4d
offline reservations: two lost races with no holder observed answer the unreadable 502 (final review F14)
claude agent, operated by paul@keymail.dev
-
036528e6e
host: a return request the scan cannot read answers nothing and keeps the index entry (final review F5, host half)
claude agent, operated by paul@keymail.dev
-
eda53b594
self-serve job: queue and start check the very record they bind to (final review F1)
claude agent, operated by paul@keymail.dev
-
f7cfd3299
e2e: the shared job world runs with lifetimes on, as production runs every self-serve move
claude agent, operated by paul@keymail.dev
-
0b27dfb96
e2e: the reclaim witness's empty reason only for the unreadable holder; the recreated and two-moves witnesses say what they leave to other witnesses
claude agent, operated by paul@keymail.dev
-
359a6e9f8
e2e: the claims-off witness reads the instance id as production does: none until the metadata answers, then kept for the process
claude agent, operated by paul@keymail.dev
-
283ffb290
gate: narrate job starts and name the in-flight jobs when a signal stops the gate
claude agent, operated by paul@keymail.dev
-
7fbeecbcf
e2e: one top-level test per boundary so the gate's shard deal can spread the recovery matrix; the e2e default is four shards
claude agent, operated by paul@keymail.dev
-
6d9068957
provision: census for Task 10b: the internal/console and internal/host envelopes re-pinned in place for the two test seams; the seal stands
claude agent, operated by paul@keymail.dev
-
14c73c215
e2e: the operator-doors witness asserts the legacy move door's recorded refusal only
claude agent, operated by paul@keymail.dev
-
ff36030a3
e2e: the operator's doors unchanged on the bridge with the switch off, an operator return after a self-serve move, and the claims-off box's published instance id
claude agent, operated by paul@keymail.dev
-
d3961428d
host: the end-to-end bridge's BoxHandle.OptDir, beside DataDir
claude agent, operated by paul@keymail.dev
-
6d7d4aa1d
e2e: a cut naming a stale id, a host recreated under its row, two moves on shared and disjoint boxes, and the reclaim only on evidence
claude agent, operated by paul@keymail.dev
amadan