← Branches
zdd-flag-readiness-2
Commits
-
7c81e0318
Merge remote-tracking branch 'origin/main' into zdd-flag-readiness-2
claude agent, operated by paul@keymail.dev
-
bcd075152
ci: re-run (TestSystemDoorsRefuseAPreLayoutMoveWhileABoxIsNested timing flake on d15fd8ab; passes 15/15 locally)
claude agent, operated by paul@keymail.dev
-
d15fd8ab5
copy: readiness round 2's seven strings, approved by Paul unchanged; rev-18 amendment approved
claude agent, operated by paul@keymail.dev
-
96b5f9a16
gate: the armed-box book test asserts the hard rule's saved book, not the removed 2^20 advance
claude agent, operated by paul@keymail.dev
-
53fa411ac
gate: TestAFirstWakeIsObservedFromTheMomentItIsReady crashes only the first healthy generation
claude agent, operated by paul@keymail.dev
-
99bcad93a
gate: the record-write census re-pins handleInstanceRetry after the declined confirmation line
claude agent, operated by paul@keymail.dev
-
e07f88369
gate: the root e2e retry fixture reports the retry protocol its box takes
claude agent, operated by paul@keymail.dev
-
ebd72f96d
Merge remote-tracking branch 'origin/main' into zdd-flag-readiness-2
claude agent, operated by paul@keymail.dev
-
a6eb8b35c
fix wave 2: an exhausted failure book's doc gives no unsafe recovery advice
claude agent, operated by paul@keymail.dev
-
3423b7755
docs: Astra's whole-branch review of readiness round 2, round 2
claude agent, operated by paul@keymail.dev
-
bcdf4fe91
fix wave 1: TestARetainedCopyIsPublishedBeforeItIsRecorded waits for its wake goroutine's last generations write
claude agent, operated by paul@keymail.dev
-
738782134
fix wave 1: two rollout test flakes (a scheduler swap's v1 ack; the retry attempt's own pointer read)
claude agent, operated by paul@keymail.dev
-
692d1533e
fix wave 1: the failure book's sequence fails closed before it could wrap
claude agent, operated by paul@keymail.dev
-
f7e27b3ea
fix wave 1: plan environment text follows the global scratch rules (GOCACHE on disk; /tmp/k only for socket-length test dirs)
claude agent, operated by paul@keymail.dev
-
a967da808
fix wave 1: roll notes, audit of every data-dir copy and restore path for the failure book
claude agent, operated by paul@keymail.dev
-
67f63aff3
fix wave 1: roll notes, a hand-cleared seed obligation is cleared with the agent stopped
claude agent, operated by paul@keymail.dev
-
929dfc397
fix wave 1: I9 orders restriction transitions as they land and lets only an applied clear discharge a fact
claude agent, operated by paul@keymail.dev
-
e22f840de
fix wave 1: a seed whose termination is unknown keeps the lease (failed discharge after an unproved success, unreadable obligation)
claude agent, operated by paul@keymail.dev
-
708498257
fix wave 1: a stopping instance keeps the lease until every sidecar it stopped or a restart returned has exited
claude agent, operated by paul@keymail.dev
-
6a81b137d
docs: Astra's whole-branch review of readiness round 2, round 1
claude agent, operated by paul@keymail.dev
-
4c9bc5257
docs: roll notes fix round 1 (seed obligation clearing order, kernel test names, supersession pointers)
claude agent, operated by paul@keymail.dev
-
4e58e4a5a
docs: rev-18 amendment for signed host retries (pending Paul); roll notes for readiness round 2
claude agent, operated by paul@keymail.dev
-
4771d147e
activator: a seed proof on a kernel with no cgroup.kill keeps the leader-only proof
claude agent, operated by paul@keymail.dev
-
790329485
activator: a flag-off wake proves its host cgroup empty before it restores
claude agent, operated by paul@keymail.dev
-
5e51c0086
activator: a seed's obligation is written before it runs and removed only once it is proven gone, nested seeds included
claude agent, operated by paul@keymail.dev
-
097ca9300
activator: a flag-off stop on a kernel with no cgroup.kill keeps the leader-only proof
claude agent, operated by paul@keymail.dev
-
ac9f3fefa
activator: one pending-stop reaper, its proof chosen by the flag
claude agent, operated by paul@keymail.dev
-
d6996537d
activator: seeds and flag-off stops prove their processes gone before the lease goes
claude agent, operated by paul@keymail.dev
-
4c5e43b56
activator: a seed's processes are proven gone before its database goes, and an unproven seed leaves an obligation
claude agent, operated by paul@keymail.dev
-
8530210ea
cgroup: a generation start reads the PID-move latch once and is never moved
claude agent, operated by paul@keymail.dev
-
985939093
cgroup: a generation whose limits cannot be applied does not start
claude agent, operated by paul@keymail.dev
-
deb4c8117
activator: a one-shot is good only after a clean park, and a waiting wake never starts a second
claude agent, operated by paul@keymail.dev
-
c910d020d
activator: a declined box pins the live link once, and a refused sidecar runs the instance's build
claude agent, operated by paul@keymail.dev
-
903ed7caa
activator: a declined box pins the live link once for nested starts and seeds
claude agent, operated by paul@keymail.dev
-
65d4e1350
console: a declined box's down hold says it cannot run two builds; one retry refusal for page and door
claude agent, operated by paul@keymail.dev
-
6e6ad000e
console: a declined box's hold and retry on the instance page (copy pending review)
claude agent, operated by paul@keymail.dev
-
18bde560b
retries: a flag-off box stays silent about historic legacy retries; honest refused-grant log; console retry test gaps
claude agent, operated by paul@keymail.dev
-
4d8957c1c
retries: signed host retries ride their own object; the console asks the box's report first
claude agent, operated by paul@keymail.dev
-
9f27cdfaf
retries: the box reads grants from the host-retry log and a legacy signed grant from the restart-scope log; neither is seed-skipped at agent restart
claude agent, operated by paul@keymail.dev
-
6e9e84bd8
retries: the host-retry log (apps/<acct>/<app>/host-retry.json); the restart-scope log takes no retry or signature
claude agent, operated by paul@keymail.dev
-
96abda964
rollout sim: the rewake always wakes another instance when the marked build has no record (M17 on three seeds at 300)
claude agent, operated by paul@keymail.dev
-
43694ffe2
rollout sim: a new record is every host's I9 fact; M17; seeds end their parked attempts (Task 2 fix round 1)
claude agent, operated by paul@keymail.dev
-
305cd5479
rollout sim: comments for M15's witness and the rewake draw
claude agent, operated by paul@keymail.dev
-
f1c2582a7
rollout sim: grants to held hosts, a Retry then a stopped rewake under the marker (M14's witness), restarts reread the disk, rebuilds 1 in 150
claude agent, operated by paul@keymail.dev
-
a713ffb4e
rollout sim: mutants M13-M16 for the crash-epoch hard limit; mutate.sh timeout scales with seeds
claude agent, operated by paul@keymail.dev
-
caf9557bb
rollout sim: stale grants, crashes and failed saves; I9, I10
claude agent, operated by paul@keymail.dev
-
191c12b99
rollout: pin the marker-only and cross-app generation bumps; failure book schema 3 (Task 1 fix round 1)
claude agent, operated by paul@keymail.dev
-
7c7c61411
rollout: a restriction's generation is durable before use and never repeats (Paul's hard limit)
claude agent, operated by paul@keymail.dev
-
d0acab170
plan: readiness round 2, revised after Astra's plan review (REJECT, 12 findings)
claude agent, operated by paul@keymail.dev
-
85ffab85d
plan: zero-downtime flag readiness, round 2 (draft for Astra's review)
claude agent, operated by paul@keymail.dev