amadan
docs: roll notes, the consumed/ census item moved to #250 (#272)
platform-1e owns it under Plan 14: root's retirement removes the consumed file, its lock and the record atomically, a re-install passes the empty-installation census, and a runner test covers install, retire and re-install. The settings plan 4 entry also notes Astra's P1 and P2 fixes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+19
−13
docs/superpowers/plans/2026-10-07-zero-downtime-deploys-6-roll-notes.md+19 −13
diff --git a/docs/superpowers/plans/2026-10-07-zero-downtime-deploys-6-roll-notes.md b/docs/superpowers/plans/2026-10-07-zero-downtime-deploys-6-roll-notes.md| index ff389ce44..398479619 100644 |
| --- a/docs/superpowers/plans/2026-10-07-zero-downtime-deploys-6-roll-notes.md |
| +++ b/docs/superpowers/plans/2026-10-07-zero-downtime-deploys-6-roll-notes.md |
| @@ -65,11 +65,13 @@ merge", read the state here instead. |
| - **Owed items from settings plan 4** (branch `zdd-owed-items`): |
| - Closed: a cold wake's build-state record is now written at the exec, |
| after the replica-key gate and the cgroup refusals, so a refused launch |
| - leaves no record. This was owed before O8 (replica keys) is switched on. |
| + leaves no record. The exec is decided again after the write, and a |
| + nested seed writes its obligation before its record (Astra's review of |
| + the branch, P1 and P2). This was owed before O8 (replica keys) is |
| + switched on. |
| - Closed: `release.ResolveLivePath` now calls `release.ResolveLiveLink`. |
| The two had identical bodies. |
| - - Open: leftover `consumed/` files refuse the claims census. It is owed |
| - before host claims are switched on, and does not block the flag. See |
| + - MOVED to #250: leftover `consumed/` files refuse the claims census. See |
| "Still owed (code)". |
| - **Claims-on swaps** remain a future feature. A box with host claims on |
| declines the flag with the reason code `host-claims-on`. |
| @@ -313,22 +315,26 @@ Closed, with the commits that closed them: |
| - Task 10's grant consumed while the row is moving or landing (`076bd9c0`). |
| - From settings plan 4, on branch `zdd-owed-items`: a cold wake's build-state |
| record is written at the exec, after the replica-key gate and the cgroup |
| - refusals, so a refused launch leaves no record (owed before O8); and |
| - `release.ResolveLivePath` calls `release.ResolveLiveLink`. |
| + refusals, so a refused launch leaves no record (owed before O8). The exec |
| + is decided again after the write, and a nested seed writes its obligation |
| + first. |
| +- Also from settings plan 4, on the same branch: `release.ResolveLivePath` |
| + calls `release.ResolveLiveLink`. |
| Still open: |
| - Claims-on swaps (the four gaps from `CODEX-FINDINGS-ZDD-IMPL-5-MERGE.md`). |
| A future feature, not scheduled. A box with host claims on declines the |
| flag. |
| -- Leftover `consumed/` files refuse the claims census. Root's request record |
| - `/opt/carlos/consumed/<host>` and its fence lock `.<host>.lock` outlive the |
| - installation, and the empty-installation census refuses both. It also |
| - refuses another host's record, which is an unclassified file. The claims |
| - design keeps the census as it is (instance-key ruling 24): the record has |
| - to be retired with the installation. Only root can remove it, so the fix |
| - belongs to root's claim lifecycle. Owed before host claims are switched on. |
| - It does not block the flag. |
| +- **MOVED to #250.** Leftover `consumed/` files refuse the claims census. |
| + Root's request record `/opt/carlos/consumed/<host>` and its fence lock |
| + `.<host>.lock` outlive the installation, and the empty-installation census |
| + refuses both. It also refuses another host's record, which is an |
| + unclassified file. platform-1e owns it now, under Plan 14. Root's |
| + retirement removes the consumed file, its lock and the record atomically, |
| + so a re-install passes the empty-installation census. A runner test covers |
| + install, retire and re-install. It is owed before host claims are switched |
| + on, and does not block the flag. |
| ### Roll notes from zdd-flag-readiness |