amadan
carlos / platform Public
A7-1 is closed at design level. A7-2 covers immediate creates, but the settlement boundary remains incomplete. Two new P2 findings:
- P2 — The barrier misses inbound moves and relocations already in progress. Spec:299
The four checks cover creates and current executors. A relocation records intent.target_box while execution remains on the source or is none; it later assigns execution to that target. Cross-region moves similarly retain intent.target.
Failure scenario: an operation selects the old box before draining and stalls. Migration empties its current hosts, and all four checks pass. The operation then resumes onto the supposedly empty box, potentially after its final termination check.
Extend settlement to outstanding move/relocation targets and their pre-claim requests, including box-side relocation starters. Rehearse this race separately from creates.
- P2 — A settled create may produce an instance the migration cannot relocate. Spec:350
Migration requires relocating every instance. However, Worker.Start refuses drain/rebalance when Holder.Session == 0. An existing test explicitly preserves this refusal.
Failure scenario: a pre-drain create completes through recovery but receives no traffic and never wakes. The barrier correctly includes it in migration, but relocation refuses it. The required emptiness check cannot pass.
Make support for relocating never-woken instances an explicit prerequisite or part of spec 2, with a rehearsal covering this case.
Reviewed platform c2fba632 and flagship tofu 7c99ff8f. No files changed; no builds, tests, or infrastructure commands run.
---
FIRST PROMPT: Review spec 2 round 8 at the pinned HEAD against flagship tofu, read-only.
WHAT: Check A7-1/A7-2 closure and report new findings.
STATUS: Complete; two P2 findings.
NEEDED: Nothing.
RECOMMENDED: Extend settlement to moves and relocations; resolve never-woken migration before planning.
SESSION: Safe to close; nothing started or modified.
Verdict: not ready for a plan.