| 1 | # Plan 14 census ruling owed (amadan #272, branch zdd-owed-items; approved by platform-1e as census-ruling-owed; loaded after census-ruling-275): the cold wake's build-state record moves from step 2b to the first exec, after the replica-key gate and the cgroup refusals, so a refused launch leaves no record (owed before O8). After the write the exec is decided again (the exec gate, the live check, the wake's context and maintenance fence), and a nested seed writes its obligation before its record (Astra's review, P1 and P2). |
| 2 | # The four changed activator units stay accepted legacy because they stay agent-side, running as carlos: only runAgent builds the activator, under carlos-edge.service with User=carlos. The record is the existing BeforeExec build-state write, moved later, never earlier. No new read and no root decision. If any of these units ever runs as root or reads outside that boundary it stops being legacy and needs the Plan 14 owner's ruling. Earlier overlays are immutable. |
| 3 | @legacy bdd27149b9dcce980ebca238207c286eeefd52353b2daa752516123d71a2c0a7 internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; step 2b no longer writes the build-state record: the wake carries it pending on its context (settleWakeIdentity's) and the first exec writes it. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20401,registry:Host@1014,registry:Host@1166,registry:Host@1277,registry:Host@174,registry:Host@2137,registry:Host@3858,registry:Host@861,registry:Host@936,registry:Replication@20436,registry:Seed@11207,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10058,whole:Route@11308,whole:Route@11379,whole:Route@1231,whole:Route@1237,whole:Route@1303,whole:Route@1311,whole:Route@13763,whole:Route@15621,whole:Route@159,whole:Route@16267,whole:Route@17574,whole:Route@17728,whole:Route@18084,whole:Route@18178,whole:Route@18850,whole:Route@19849,whole:Route@19997,whole:Route@2027,whole:Route@20510,whole:Route@21408,whole:Route@21503,whole:Route@3481,whole:Route@3740,whole:Route@3810,whole:Route@3816,whole:Route@3885,whole:Route@3893,whole:Route@4681,whole:Route@5680,whole:Route@6713,whole:Route@7594,whole:Route@9176,whole:Route@9368,whole:Route@959 f09606c9a22d961f17610105b6b0b126676f62874fe8ef8a5b09649a8b36b73f |
| 4 | internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; step 2b no longer writes the build-state record: the wake carries it pending on its context (settleWakeIdentity's) and the first exec writes it. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20401,registry:Host@1014,registry:Host@1166,registry:Host@1277,registry:Host@174,registry:Host@2137,registry:Host@3858,registry:Host@861,registry:Host@936,registry:Replication@20436,registry:Seed@11207,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10058,whole:Route@11308,whole:Route@11379,whole:Route@1231,whole:Route@1237,whole:Route@1303,whole:Route@1311,whole:Route@13763,whole:Route@15621,whole:Route@159,whole:Route@16267,whole:Route@17574,whole:Route@17728,whole:Route@18084,whole:Route@18178,whole:Route@18850,whole:Route@19849,whole:Route@19997,whole:Route@2027,whole:Route@20510,whole:Route@21408,whole:Route@21503,whole:Route@3481,whole:Route@3740,whole:Route@3810,whole:Route@3816,whole:Route@3885,whole:Route@3893,whole:Route@4681,whole:Route@5680,whole:Route@6713,whole:Route@7594,whole:Route@9176,whole:Route@9368,whole:Route@959 f09606c9a22d961f17610105b6b0b126676f62874fe8ef8a5b09649a8b36b73f |
| 5 | @legacy 9dcf78cbffdc590abbafd3245215de0ffeda0d54f236f23a7e63583ed2a71495 internal/activator/backend_exec.go ExecBackend.seedChild legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the flat seed's cgroup before-start hook writes the wake's pending record, after the cgroup's refusals and immediately before the exec. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. file:CommandContext@3135,file:Stat@2036,registry:App@4384,registry:Host@120,whole:Route@1409,whole:Route@149,whole:Route@1541,whole:Route@1745,whole:Route@176,whole:Route@3083,whole:Route@4379,whole:Route@672,whole:Route@7143,whole:Route@755,whole:Route@9949 4b5fcf0426aeb5b573d1dd0b0ab6ae09b141eca1ee266fd8bcd9ca642242796b |
| 6 | internal/activator/backend_exec.go ExecBackend.seedChild legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the flat seed's cgroup before-start hook writes the wake's pending record, after the cgroup's refusals and immediately before the exec. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. file:CommandContext@3135,file:Stat@2036,registry:App@4384,registry:Host@120,whole:Route@1409,whole:Route@149,whole:Route@1541,whole:Route@1745,whole:Route@176,whole:Route@3083,whole:Route@4379,whole:Route@672,whole:Route@7143,whole:Route@755,whole:Route@9949 4b5fcf0426aeb5b573d1dd0b0ab6ae09b141eca1ee266fd8bcd9ca642242796b |
| 7 | @legacy a929d4da62b876ce456ac082b71b888be0dace9a588504839785f0075304aaaf internal/activator/backend_exec.go ExecBackend.seedUnit legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the nested seed writes its obligation, then the wake's pending record, before root is asked; a record that fails or a recheck that refuses discharges the obligation and keeps the database. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. file:Stat@1644,registry:Host@135,whole:Route@1123,whole:Route@167,whole:Route@3863,whole:Route@3993,whole:Route@4528,whole:Route@532,whole:Route@613,whole:Route@679,whole:Route@997 c4665215b34dfcd1da63912a0dbe210da9fec2136b22178d3490115662df0d72 |
| 8 | internal/activator/backend_exec.go ExecBackend.seedUnit legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the nested seed writes its obligation, then the wake's pending record, before root is asked; a record that fails or a recheck that refuses discharges the obligation and keeps the database. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. file:Stat@1644,registry:Host@135,whole:Route@1123,whole:Route@167,whole:Route@3863,whole:Route@3993,whole:Route@4528,whole:Route@532,whole:Route@613,whole:Route@679,whole:Route@997 c4665215b34dfcd1da63912a0dbe210da9fec2136b22178d3490115662df0d72 |
| 9 | @legacy f8e748d7e1d462ea6d0c3e973fdf38bab439f767bde22c1dde0fffc5f1581cf5 internal/activator/beforeexec.go Service.settleWakeIdentity legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the record of the identity it settles is returned pending on the context, with the wake's own admission (its context and the maintenance fence) asked again after the write, instead of being written here. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. registry:Host@1007,registry:Host@1135,registry:Host@1267,registry:Host@1702,registry:Host@1870,registry:Host@2402,registry:Host@2759,whole:Route@1588,whole:Route@2310,whole:Route@722,whole:Route@849 844cca5d8ef92ac53a34d580db0fb51f4dc9b3c01c3959e23f90e90ffe5f0846 |
| 10 | internal/activator/beforeexec.go Service.settleWakeIdentity legacy accepted-legacy accepted-legacy;rev3=census-ruling-owed;basis=Census ruling owed (amadan #272, zdd-owed-items): changed legacy row; the record of the identity it settles is returned pending on the context, with the wake's own admission (its context and the maintenance fence) asked again after the write, instead of being written here. Boundary: agent-side, running as carlos (only runAgent builds the activator, under carlos-edge.service, User=carlos); the record is the existing BeforeExec build-state write, moved later, never earlier; no new read, no root decision, and no registry, /data, release or claim read beyond what the unit read before. registry:Host@1007,registry:Host@1135,registry:Host@1267,registry:Host@1702,registry:Host@1870,registry:Host@2402,registry:Host@2759,whole:Route@1588,whole:Route@2310,whole:Route@722,whole:Route@849 844cca5d8ef92ac53a34d580db0fb51f4dc9b3c01c3959e23f90e90ffe5f0846 |
| 11 | # Envelopes, census ruling owed: each changed root source envelope below is accepted only because the units inside it are the ones listed above. internal/activator also gains the pending-record helpers (pendingRecord, withPendingRecord, runPendingRecord, pendingRecordHook), askExecGate and the exported RunExecGate, none of which reads anything. internal/release changes only ResolveLivePath, which now calls ResolveLiveLink; its body was identical, so nothing reads differently. |
| 12 | @coverage internal/activator 281cf9604cfd728e1aa96196e35c15b9a6c88ca180f36aa2784e94d8c4732677 |
| 13 | @coverage internal/release 0261f9202141ea3d57e3a97071df1b2ac342cde420ce27f23193007a7e6df5a9 |
| 14 | |
amadan