carlos / platform Public

wake latency pass 2a: time the launch, prepare, pinned health, lease and instance-control steps; census wake-latency-2

The pass 1 journal line put 324 ms in spawn and 130 ms in the lease on a
dev wake; this splits both so pass 2 targets the real cost:
- activator: 'started <unit> ... (build, prepare (dirs, admin token,
  instance key, env, control socket, key gate, logs), launch file, gate,
  root start)' and 'generation N of B: record, start, healthy later';
- lease: 'acquired in X (client Y, lock read and write Z)';
- instance-control: prepared split into staged exe, layout, drop-in,
  check and tier.
Census: four units re-frozen with the timing (census-propose), one new
hint row by hand (leaserClientKey stats credential files to key the
cache).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude 15 hours ago 57fd2cb80349cb88d7dcc0c6beb33a0630205ccf parent 4e85d52

9 files changed, +78 −6

docs/superpowers/notes/census-proposal-wake-latency-2.md +16 −0
internal/activator/backend_exec.go +11 −2
internal/activator/prepare.go +15 −2
internal/activator/swaphold.go +6 −0
internal/instancectl/gen.go +6 −2
internal/lease/lease.go +7 −0
internal/provision/testdata/plan14-root-reads-chain.tsv +2 −0
internal/provision/testdata/plan14-root-reads-wake-latency-2-new.tsv +2 −0
internal/provision/testdata/plan14-root-reads-wake-latency-2.tsv +13 −0

CI cancelled — superseded by a newer push — run details

CI log

=== gate ===
.amadan/test-gate.sh

amadan: job cancelled — a newer push superseded it

diff --git a/docs/superpowers/notes/census-proposal-wake-latency-2.md b/docs/superpowers/notes/census-proposal-wake-latency-2.md

new file mode 100644

index 000000000..32d8ccb2c

--- /dev/null

+++ b/docs/superpowers/notes/census-proposal-wake-latency-2.md

@@ -0,0 +1,16 @@

+# Census approval: wake-latency-2

+Ruling `census-ruling-wake-latency-2`. Every change below keeps the disposition it already has, so it needs an approval, not a decision.

+|---|---|---|---|

+| `internal/activator/backend_exec.go` `ExecBackend.spawnUnitFrom` | body | unchanged (26) | times the launch's steps with time.Now() (build, prepare, launch file, gate, root start) and adds them to its existing "started" journal line; no read added or moved |

+| `internal/activator/prepare.go` `ExecBackend.prepareKeyedAt` | body | unchanged (13) | takes an optional timer and marks its steps with time.Now() (dirs, admin token, instance key, env, control socket, key gate, logs); no read added or moved |

+| `internal/activator/swaphold.go` `Service.startPinnedAt` | sites | +registry:Host | times record, staged start and health with time.Now() and logs them with rt.Host after a healthy start (the new registry:Host site is that log line); no read added or moved |

+Envelopes re-pinned: `internal/activator`, `internal/instancectl`, `internal/lease`.

+Seal: `0ca3baafa26f59c0b7d8c6d6a39237d074afb71f885b7fbd50debebab5bf89f2` → `27b020590845320cd37b94fdeddf61b7c6f90e12ba7841850f2e7bbd6836ecd8`.

+Overlay: `internal/provision/testdata/plan14-root-reads-wake-latency-2.tsv`, appended to `internal/provision/testdata/plan14-root-reads-chain.tsv`.

diff --git a/internal/activator/backend_exec.go b/internal/activator/backend_exec.go

index 6656e8ee9..d6c81c739 100644

--- a/internal/activator/backend_exec.go

+++ b/internal/activator/backend_exec.go

@@ -2394,6 +2394,9 @@ func (b *ExecBackend) normalizeSocketMode(rt registry.Route, sock string, proc P

// generation-keyed files (unitGen); otherwise it is ignored. A failure

// whose kill could not prove the unit empty wraps errGenUnproven.

func (b *ExecBackend) spawnUnitFrom(ctx context.Context, rt registry.Route, sock string, n uint64, exe *instancectl.StagedExe, tier cgroup.Limit) (Proc, string, error) {

+ // The launch's own split, for the journal (wake latency, pass 2).

+ var steps wakeSteps

+ steps.begin(time.Now())

if err := b.nestedGate(rt); err != nil {

return nil, "", err

}

@@ -2421,7 +2424,9 @@ func (b *ExecBackend) spawnUnitFrom(ctx context.Context, rt registry.Route, sock

return nil, "", err

}

- p, ctl, logs, fileEnv, keyLayer, err := b.prepareKeyedAt(rt, instancectl.RoleRun, sock, gen)

+ steps.mark(time.Now(), "build")

+ var prep wakeSteps

+ p, ctl, logs, fileEnv, keyLayer, err := b.prepareKeyedAt(rt, instancectl.RoleRun, sock, gen, &prep)

if err != nil {

return nil, "", err

}

@@ -2434,9 +2439,11 @@ func (b *ExecBackend) spawnUnitFrom(ctx context.Context, rt registry.Route, sock

}

childVars := b.agentOwnedVars(rt, sock+".control", fileEnv, ctl != nil)

argv := []string{b.liveLink(rt.Host), "--socket", sock, "--db", p.dbPath}

+ steps.mark(time.Now(), "prepare ("+prep.String()+")")

if err := b.writeLaunchFor(p, instancectl.RoleRun, gen, rt.Host, argv, childEnv(childVars)); err != nil {

return fail(err)

}

+ steps.mark(time.Now(), "launch file")

// Read the symlink immediately before the start, same fail-safe

// direction as startChild: a concurrent repoint at worst records the

// older version (one extra convergence cycle), never the newer. A

@@ -2461,7 +2468,9 @@ func (b *ExecBackend) spawnUnitFrom(ctx context.Context, rt registry.Route, sock

}

return fail(err)

}

+ steps.mark(time.Now(), "gate")

inv, err := b.startRole(ctx, rt, instancectl.RoleRun, gen, exe, tier)

+ steps.mark(time.Now(), "root start")

// Past this call root may have started the unit: every failure below

// but ErrStagedExe (root's refusal before it laid out or started

// anything) and errNoStagedExeControl (root was never asked: the

@@ -2518,7 +2527,7 @@ func (b *ExecBackend) spawnUnitFrom(ctx context.Context, rt registry.Route, sock

if started == (cgroup.Limit{}) {

started = b.tier(rt)

}

- log.Printf("activator: %s: started %s memory.max=%d", rt.Host, unitName(instancectl.RoleRun, rt.Host, gen), started.MemoryMax)

+ log.Printf("activator: %s: started %s memory.max=%d (%s)", rt.Host, unitName(instancectl.RoleRun, rt.Host, gen), started.MemoryMax, steps.String())

up := b.newUnitProcFor(rt, instancectl.RoleRun, gen, p, inv, ctl, logs)

// The file environment this generation launched with, kept on its

// handle: a run against it composes its environment from this, never

diff --git a/internal/activator/prepare.go b/internal/activator/prepare.go

index 39eadb475..288d79507 100644

--- a/internal/activator/prepare.go

+++ b/internal/activator/prepare.go

@@ -47,7 +47,7 @@ func (b *ExecBackend) prepare(rt registry.Route, role instancectl.Role) (instanc

// it keys the log socket and the exit records cleared (zero-downtime spec

// §7.6).

func (b *ExecBackend) prepareAt(rt registry.Route, role instancectl.Role, sock string, gen uint64) (instancePaths, *edge.ControlListener, *logListener, map[string]string, error) {

- p, ctl, logs, env, _, err := b.prepareKeyedAt(rt, role, sock, gen)

+ p, ctl, logs, env, _, err := b.prepareKeyedAt(rt, role, sock, gen, nil)

return p, ctl, logs, env, err

}

@@ -55,7 +55,13 @@ func (b *ExecBackend) prepareAt(rt registry.Route, role instancectl.Role, sock s

// CARLOS_INSTANCE_KEY came from, decided by the same read (instance-key

// ruling 29). The nested run spawn keeps both on the generation's handle,

// for a run's command against that generation (StartCmd).

-func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, sock string, gen uint64) (instancePaths, *edge.ControlListener, *logListener, map[string]string, instancekey.Layer, error) {

+// steps, when not nil, times prepare's parts for the caller's journal line.

+func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, sock string, gen uint64, steps *wakeSteps) (instancePaths, *edge.ControlListener, *logListener, map[string]string, instancekey.Layer, error) {

+ if steps == nil {

+ steps = &wakeSteps{}

+ } else {

+ steps.begin(time.Now())

+ }

p := b.pathsFor(rt)

if err := os.MkdirAll(p.dataDir, 0o700); err != nil {

return p, nil, nil, nil, instancekey.LayerNone, err

@@ -66,6 +72,7 @@ func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, s

if err := os.MkdirAll(filepath.Dir(b.logSocketFor(rt.Host, role, gen)), 0o700); err != nil {

return p, nil, nil, nil, instancekey.LayerNone, err

}

+ steps.mark(time.Now(), "dirs")

var env map[string]string

var keyLayer instancekey.Layer // the layer env's key came from, read with it (ruling 29)

switch role {

@@ -76,14 +83,17 @@ func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, s

if err := EnsureAdminTokenBeneath(p.dataDir, rt.Host+".env"); err != nil {

return p, nil, nil, nil, instancekey.LayerNone, fmt.Errorf("admin token for %s: %w", rt.Host, err)

}

+ steps.mark(time.Now(), "admin token")

if _, err := b.ensureInstanceKeyFor(context.Background(), rt, p); err != nil { // prepareAt has no ctx to bound the mint's bucket read; configReadTimeout does

return p, nil, nil, nil, instancekey.LayerNone, fmt.Errorf("instance key for %s: %w", rt.Host, err)

}

+ steps.mark(time.Now(), "instance key")

var err error

env, keyLayer, err = b.instanceEnvLayer(rt)

if err != nil {

return p, nil, nil, nil, instancekey.LayerNone, err

}

+ steps.mark(time.Now(), "env")

case instancectl.RoleCmd:

// A run's environment is the one its generation launched with

// (merge ruling M3), which StartCmd has. The delivered files are

@@ -137,6 +147,7 @@ func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, s

}

_ = os.Remove(sock)

ctl = b.listenControl(rt, sock+".control", p.envFile, gen)

+ steps.mark(time.Now(), "control socket")

}

// A replica's roles are gated like a flat launch (ruling 26): the seed

// and the sidecar have no control socket, the run role has the one just

@@ -152,6 +163,7 @@ func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, s

return p, nil, nil, nil, instancekey.LayerNone, err

}

+ steps.mark(time.Now(), "key gate")

// The cmd role's output goes only to its own chunks, never to the

// journal or the app log, so it has no app-log listener.

var logs *logListener

@@ -165,6 +177,7 @@ func (b *ExecBackend) prepareKeyedAt(rt registry.Route, role instancectl.Role, s

return p, nil, nil, nil, instancekey.LayerNone, fmt.Errorf("log listener for %s %s: %w", rt.Host, role, err)

}

+ steps.mark(time.Now(), "logs")

return p, ctl, logs, env, keyLayer, nil

}

diff --git a/internal/activator/swaphold.go b/internal/activator/swaphold.go

index c55654d96..279606566 100644

--- a/internal/activator/swaphold.go

+++ b/internal/activator/swaphold.go

@@ -458,13 +458,17 @@ func (a *Service) startPinnedAt(ctx context.Context, rt registry.Route, pin Gen,

// records again). A refusal returns no process: nothing ran. If the

// backend's own exec gate then refuses, the state names a build about to

// run that did not, which the spec allows ("or one about to").

+ // Timed for the journal (wake latency, pass 2).

+ began := time.Now()

if err := a.recordBuild(ctx, rt.Host, pin.Build); err != nil {

return nil, "", pin, err

}

+ recorded := time.Now()

g, proc, err := gb.StartStaged(withExecGate(ctx, gate), rt, pin)

if err != nil {

return proc, "", pin, err

}

+ started := time.Now()

if g.N != pin.N || g.Build != pin.Build || g.StagedPath != pin.StagedPath {

return proc, "", pin, fmt.Errorf("%w: generation %d of %s from %q; the hold chose %s from %q", errPinMismatch, g.N, g.Build, g.StagedPath, pin.Build, pin.StagedPath)

}

@@ -477,6 +481,8 @@ func (a *Service) startPinnedAt(ctx context.Context, rt registry.Route, pin Gen,

if err := a.genHealthy(hctx, g); err != nil {

return proc, "", g, err

}

+ log.Printf("activator: %s: generation %d of %s: record %s, start %s, healthy %s later", rt.Host, g.N, g.Build,

+ recorded.Sub(began).Round(time.Millisecond), started.Sub(recorded).Round(time.Millisecond), time.Since(started).Round(time.Millisecond))

gb.GenReady(rt, g, proc)

return proc, g.Build, g, nil

}

diff --git a/internal/instancectl/gen.go b/internal/instancectl/gen.go

index c23172173..54b308362 100644

--- a/internal/instancectl/gen.go

+++ b/internal/instancectl/gen.go

@@ -155,6 +155,7 @@ func (s *Server) startGen(w http.ResponseWriter, r *http.Request, req request) {

if s.refuseStagedExe(w, req, unit) {

return

}

+ checked := time.Now()

if s.refuseStart(w, req.host, unit, func() error {

err := s.ensureGenExeAt(req.host, req.gen, req.exe)

if err != nil {

@@ -168,10 +169,12 @@ func (s *Server) startGen(w http.ResponseWriter, r *http.Request, req request) {

s.removeGenFiles(unit)

http.Error(w, msg, status)

}

+ laidOut := time.Now()

if err := s.writeGenDropIn(req.host, req.gen, req.tier); err != nil {

fail(http.StatusBadGateway, "drop-in: "+err.Error())

return

}

+ written := time.Now()

// The reload is only for a unit systemd already holds loaded from older

// files. A generation's unit is new and an inactive one is unloaded

// straight away, so the next reference reads the drop-in fresh: the

@@ -210,8 +213,9 @@ func (s *Server) startGen(w http.ResponseWriter, r *http.Request, req request) {

s.abandonGen(ctx, w, req.host, unit, "show: "+err.Error())

return

}

- s.logf("instance-control: %s: started %s memory.max=%d (prepared in %s, reload %s, start %s)", req.host, unit, req.tier.MemoryMax,

- startAt.Sub(began).Round(time.Millisecond), reload, time.Since(startAt).Round(time.Millisecond))

+ ms := func(d time.Duration) time.Duration { return d.Round(time.Millisecond) }

+ s.logf("instance-control: %s: started %s memory.max=%d (prepared in %s: staged exe %s, layout %s, drop-in %s, check and tier %s; reload %s, start %s)", req.host, unit, req.tier.MemoryMax,

+ ms(startAt.Sub(began)), ms(checked.Sub(began)), ms(laidOut.Sub(checked)), ms(written.Sub(laidOut)), ms(startAt.Sub(written)), reload, ms(time.Since(startAt)))

writeJSON(w, http.StatusOK, StartResponse{InvocationID: strings.TrimSpace(inv)})

}

diff --git a/internal/lease/lease.go b/internal/lease/lease.go

index 3da80af54..11c14c5de 100644

--- a/internal/lease/lease.go

+++ b/internal/lease/lease.go

@@ -15,6 +15,7 @@ import (

"context"

"errors"

"fmt"

+ "log"

"os"

"path/filepath"

"sync"

@@ -175,10 +176,12 @@ func AcquireTTL(ctx context.Context, bucket, prefix, region string, ttl time.Dur

// and the data it guards must resolve to the same store. The region is

// resolved ONCE, here, and carried on the Held: Replicate's replica client

// has to sign for whatever this client signed for.

+ began := time.Now()

client, region, err := newLeaserClient(ctx, region)

if err != nil {

return nil, err

}

+ built := time.Now()

leaser := lss3.NewLeaser()

leaser.SetClient(client)

@@ -205,6 +208,10 @@ func AcquireTTL(ctx context.Context, bucket, prefix, region string, ttl time.Dur

_ = leaser.ReleaseLease(relCtx, cur)

return nil, err

}

+ // Journal only: the wake's lease step, split into the client and the

+ // lock's own read and conditional write.

+ log.Printf("lease: %s: acquired in %s (client %s, lock read and write %s)", prefix,

+ time.Since(began).Round(time.Millisecond), built.Sub(began).Round(time.Millisecond), time.Since(started).Round(time.Millisecond))

return &Held{leaser: leaser, region: region, rn: rn}, nil

}

diff --git a/internal/provision/testdata/plan14-root-reads-chain.tsv b/internal/provision/testdata/plan14-root-reads-chain.tsv

index b55f07f47..3594fad75 100644

--- a/internal/provision/testdata/plan14-root-reads-chain.tsv

+++ b/internal/provision/testdata/plan14-root-reads-chain.tsv

@@ -4,3 +4,5 @@

plan14-root-reads-sec-host-imdsv2-module.tsv 945934f5978ace14dc5a9bae0ed69dfabf29b994504fc843c03d4a633ecd6c6a

plan14-root-reads-sec-deps-dos-bumps.tsv 945934f5978ace14dc5a9bae0ed69dfabf29b994504fc843c03d4a633ecd6c6a

plan14-root-reads-sec-sidecar-create-gate.tsv 0ca3baafa26f59c0b7d8c6d6a39237d074afb71f885b7fbd50debebab5bf89f2

+plan14-root-reads-wake-latency-2-new.tsv 0ca3baafa26f59c0b7d8c6d6a39237d074afb71f885b7fbd50debebab5bf89f2

+plan14-root-reads-wake-latency-2.tsv 27b020590845320cd37b94fdeddf61b7c6f90e12ba7841850f2e7bbd6836ecd8

diff --git a/internal/provision/testdata/plan14-root-reads-wake-latency-2-new.tsv b/internal/provision/testdata/plan14-root-reads-wake-latency-2-new.tsv

new file mode 100644

index 000000000..1273a4b36

--- /dev/null

+++ b/internal/provision/testdata/plan14-root-reads-wake-latency-2-new.tsv

@@ -0,0 +1,2 @@

+# Census overlay wake-latency-2-new (wake latency pass 2), hand-written: the one new unit census-propose leaves to a decision. census-ruling-wake-latency-2, asked of the census owner in session with the approval card (docs/superpowers/notes/census-proposal-wake-latency-2.md).

+internal/lease/clientcache.go leaserClientKey hint J4 rev3=census-ruling-wake-latency-2;identity=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), and any root caller of the lease package;basis=stats the credentials and config files an AWS config load could open (/etc/carlos/credentials, AWS_SHARED_CREDENTIALS_FILE, AWS_CONFIG_FILE, ~/.aws) only to key a cached S3 client, so a changed file builds a fresh one; it reads no file content and decides nothing else file:Stat@738 d4cd917539a14b0fd2587efbff93fe092f8703d34e1f852e2e2aabd7e439d771

diff --git a/internal/provision/testdata/plan14-root-reads-wake-latency-2.tsv b/internal/provision/testdata/plan14-root-reads-wake-latency-2.tsv

new file mode 100644

index 000000000..b2385b9b4

--- /dev/null

+++ b/internal/provision/testdata/plan14-root-reads-wake-latency-2.tsv

@@ -0,0 +1,13 @@

+# Census overlay wake-latency-2, written by census-propose (#369). census-ruling-wake-latency-2, approved by the census owner before the merge; the approval card is docs/superpowers/notes/census-proposal-wake-latency-2.md.

+# 3 body, 1 sites, 3 envelope: each changed unit re-frozen at its existing disposition with its claim appended.

+@legacy b2c5ff1260bffcd7f2cc4b537ebc79989befbc6aeaf04f4330d775cb30cb49fe internal/activator/backend_exec.go ExecBackend.spawnUnitFrom legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=Re-digested at the pre-land merge: the body includes main's own change under census ruling 292, with no further change from this branch. the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body; it calls prepareKeyedAt and keeps the launch environment and its key layer on the generation's handle; read sites unchanged, offsets moved;rev3=census-ruling-wake-latency-2;basis=times the launch's steps with time.Now() (build, prepare, launch file, gate, root start) and adds them to its existing "started" journal line; no read added or moved registry:Host@1185,registry:Host@1662,registry:Host@1820,registry:Host@2277,registry:Host@2757,registry:Host@3753,registry:Host@4339,registry:Host@4609,registry:Host@4829,registry:Host@5014,registry:Host@5409,registry:Host@5690,registry:Host@5752,registry:Host@5910,registry:Host@5949,registry:Host@6797,registry:Host@6891,whole:Route@1349,whole:Route@1591,whole:Route@2993,whole:Route@308,whole:Route@4662,whole:Route@5843,whole:Route@6023,whole:Route@872,whole:Route@970 24ca0bdb76b85948fb34916a49eab74e5eaf4ebea02d57adc309cbe9d0adafd8

+@legacy 41bab0818501b13d67f0b5201601faa043c0097016faabe1d932155d1080e170 internal/activator/prepare.go ExecBackend.prepareAt legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a wrapper: its ReadDir and its Host and route reads moved, unchanged, into prepareKeyedAt;rev3=census-ruling-wake-latency-2;basis=passes nil for prepareKeyedAt's new timing parameter; nothing else changed whole:Route@227 6aa2cdbd41f356d0a7497025efacb62b05a5e4f293cb20b3423bddc4c92ae72a

+@legacy 43fecababb55813cdd4ead403f99f119705bce26992eef5bcf85e0b25ffefeb8 internal/activator/prepare.go ExecBackend.prepareKeyedAt legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=Re-digested at the pre-land merge: the body includes main's own change under census ruling zddr4, with no further change from this branch beyond carrying main's new early return into the six-value signature. the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen prepareAt, which is now its wrapper; it also returns the instance key's layer and reads no env for the cmd role; same reads, same nested launch paths;rev3=census-ruling-wake-latency-2;basis=takes an optional timer and marks its steps with time.Now() (dirs, admin token, instance key, env, control socket, key gate, logs); no read added or moved file:ReadDir@2531,registry:Host@1162,registry:Host@1280,registry:Host@1588,registry:Host@5195,registry:Host@5384,registry:Host@612,whole:Route@1398,whole:Route@1705,whole:Route@320,whole:Route@4244,whole:Route@4772,whole:Route@5229 8f172cc2cdb6cea7fad368c8c0a153f1e196616b39307a9bee0c6c1672f797b2

+@legacy dc96074aa3bb2b5cea94c19a05330846701676abe78a3fa42a3587dc54c8556e internal/activator/swaphold.go Service.startPinnedAt legacy accepted-legacy accepted-legacy;rev3=J1;basis=root-route;rev3=census-ruling-wake-latency-2;basis=times record, staged start and health with time.Now() and logs them with rt.Host after a healthy start (the new registry:Host site is that log line); no read added or moved registry:Host@1183,registry:Host@1964,whole:Route@1328,whole:Route@2139,whole:Route@435 20c4e4acf9186100d5f9d3e188665597bd36f790443691a9d8c84555b67ade8a

+internal/activator/backend_exec.go ExecBackend.spawnUnitFrom legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=Re-digested at the pre-land merge: the body includes main's own change under census ruling 292, with no further change from this branch. the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body; it calls prepareKeyedAt and keeps the launch environment and its key layer on the generation's handle; read sites unchanged, offsets moved;rev3=census-ruling-wake-latency-2;basis=times the launch's steps with time.Now() (build, prepare, launch file, gate, root start) and adds them to its existing "started" journal line; no read added or moved registry:Host@1185,registry:Host@1662,registry:Host@1820,registry:Host@2277,registry:Host@2757,registry:Host@3753,registry:Host@4339,registry:Host@4609,registry:Host@4829,registry:Host@5014,registry:Host@5409,registry:Host@5690,registry:Host@5752,registry:Host@5910,registry:Host@5949,registry:Host@6797,registry:Host@6891,whole:Route@1349,whole:Route@1591,whole:Route@2993,whole:Route@308,whole:Route@4662,whole:Route@5843,whole:Route@6023,whole:Route@872,whole:Route@970 24ca0bdb76b85948fb34916a49eab74e5eaf4ebea02d57adc309cbe9d0adafd8

+internal/activator/prepare.go ExecBackend.prepareAt legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a wrapper: its ReadDir and its Host and route reads moved, unchanged, into prepareKeyedAt;rev3=census-ruling-wake-latency-2;basis=passes nil for prepareKeyedAt's new timing parameter; nothing else changed whole:Route@227 6aa2cdbd41f356d0a7497025efacb62b05a5e4f293cb20b3423bddc4c92ae72a

+internal/activator/prepare.go ExecBackend.prepareKeyedAt legacy accepted-legacy accepted-legacy;rev3=census-ruling-carlos-run;basis=Re-digested at the pre-land merge: the body includes main's own change under census ruling zddr4, with no further change from this branch beyond carrying main's new early return into the six-value signature. the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen prepareAt, which is now its wrapper; it also returns the instance key's layer and reads no env for the cmd role; same reads, same nested launch paths;rev3=census-ruling-wake-latency-2;basis=takes an optional timer and marks its steps with time.Now() (dirs, admin token, instance key, env, control socket, key gate, logs); no read added or moved file:ReadDir@2531,registry:Host@1162,registry:Host@1280,registry:Host@1588,registry:Host@5195,registry:Host@5384,registry:Host@612,whole:Route@1398,whole:Route@1705,whole:Route@320,whole:Route@4244,whole:Route@4772,whole:Route@5229 8f172cc2cdb6cea7fad368c8c0a153f1e196616b39307a9bee0c6c1672f797b2

+internal/activator/swaphold.go Service.startPinnedAt legacy accepted-legacy accepted-legacy;rev3=J1;basis=root-route;rev3=census-ruling-wake-latency-2;basis=times record, staged start and health with time.Now() and logs them with rt.Host after a healthy start (the new registry:Host site is that log line); no read added or moved registry:Host@1183,registry:Host@1964,whole:Route@1328,whole:Route@2139,whole:Route@435 20c4e4acf9186100d5f9d3e188665597bd36f790443691a9d8c84555b67ade8a

+@coverage internal/activator 01ef3773518c962eaf5e0bc12dce99847f6fa42326f39a5f5e201941d10eaf5c

+@coverage internal/instancectl 8b91f954d7b96ca3ff0251152d7049aa94c935680c12e7f5eb2cfc47105f1add

+@coverage internal/lease 27dba48cffdefc16c59cc27db71faeb85889da43ec08d24d440203c272f4dbcd