Repository navigation
feat(retention): durable hard-admission reservations - #158
Conversation
|
Important Review skippedToo many files! This PR contains 109 files, which is 9 over the limit of 100. To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch. Upgrade to a paid plan to raise the limit. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.
 |
|
Current-head CI at The log identifies a dependency-resolution failure, not a reservation test failure. Its underlying cause is not yet established. Deno remains an unresolved runtime gate; local Node evidence does not waive it. The PR stays draft for the remaining implementation and verification. |
|
The immutable point index is committed at Exact-source evidence: 84 focused tests, two native object-format cases, lint and 2,307 Node unit tests passed locally in the guarded COPY-only worker. The executed numeric-name RED returned false absence before explicit string validation fixed it. Native roots are supplied by the harness; this is not evidence of ledger capacity, ordered custody or a public API. Next are the namespace policy/header and checked ledger publication. #157 remains open. Deno failed again on this head during image installation with the same missing optional package version; #159 now owns that independent repair. Current Deno job. |
|
Public recovery checkpoint pushed at The public facade now has 32 before/after durable-boundary fault cases and 22 independent-process cases across SHA-1/SHA-256. The latter include process-group SIGKILL on both sides of arm CAS, both arm/cancel and settle/cancel winner orders, and a stale preparation resumed after cancellation and replacement-slot admission. Earlier settled receipts and retained objects survive close/GC/reopen/reconcile/retry. Final guarded Docker phase: 118 reservation integration cases pass; full Node units 2,406 pass / 3 existing conditional skips; lint passes; Deno runs the 54 new public cases successfully. Keep this PR draft. Native operation counts, measured peak residency, complete acceptance/runtime/package/review gates and release remain open. #159/#160 own the independent Deno install repair; publication and a fresh downstream install must precede WARP #1067 adoption. |
|
Hosted runtime follow-up at The historical unlocked Deno installation can now complete because the previously missing upstream package was published. This successful run does not remove #159's dependency-graph reproducibility concern. #160 has a separate frozen-install repair and current-head green CI. No dependency release or WARP adoption is claimed. |
|
Native cost/residency checkpoint at
Witness. No production implementation changed in this checkpoint. This remains draft: integrated supported-runtime/packed-consumer acceptance, current-head review and actual release remain. It does not promote a finite Node measurement into maximum-payload, adversarial-contention or Bun/Deno performance evidence. |
…rvations # Conflicts: # CHANGELOG.md # docs/design/README.md
|
All five hosted CI jobs now pass at A fresh Opus review attempt returned provider quota before inspecting source (zero input/output tokens; no verdict). Its previous reported cooldown had elapsed, but the new response reports roughly 162 hours. This is an incomplete review, not an approval or a code defect. Sonnet is also quota-limited; those providers will not be repeatedly retried during that window. CodeRabbit's draft-skipped status does not count as review. @coderabbitai review |
Action not completed
|
|
Maintainer-directed admin merge at The maintainer explicitly instructed “Just merge --admin” after being told that the independent-review providers were unavailable. This overrides the session's independent-review gate for this merge; it is not an independent APPROVE and the skipped CodeRabbit status is not counted as review evidence. The current head is mergeable, all current hosted validation jobs pass, and the fully paginated review snapshot contains no submitted reviews, inline threads, or pending review requests. Previously documented source findings and their validated repairs remain recorded in this PR. CodeRabbit's file-count cap and the terminal Agy quota responses are provider limitations, not passing reviews. The merge will use an exact-head match. Release publication and fresh downstream registry verification remain separate work; this merge does not claim either. |
Applications need to reserve retention capacity before publishing an irreversible effect. This adds a durable record-slot authority with exact caller attempt identity, ordered evidence custody and restart recovery. It preserves the existing CacheSet soft-capacity contract; record slots are not physical-byte quotas.
The public namespace exposes reserve, prepare, arm, settle, cancel, reconcile, inspect, readEvidence and bounded listing. One checked ledger owns admission and lifecycle decisions; custody refs retain original/final pages, support objects and history through real Git edges. Only the fresh armed acknowledgement grants permission to proceed. Reconciliation never arms, replays application work or refunds an armed charge. Exact retries recover their original attempt; conflicting bindings and detected unavailable evidence refuse honestly.
Listing binds namespace, immutable revision, route and phase to its cursor. Seek/tree/record reads spend an explicit node budget, even when a filter produces no matches. Collected snapshots return unavailable. Point admission/lookup follows a bounded hashed route rather than hydrating all retained records.
Design · public recovery · corruption acceptance · native work and residency · integrated runtime/package witness · release thesis.
Validation is recorded against complete copied-source identities in the guarded COPY-only worker:
7fad342passes Node units 2,407 / three existing skips; Deno units 2,398 / 12 existing skips; 351 integration cases under each; lint and both declaration fixtures.Head
d920ee0records that integrated evidence and updates draft documentation; current-head hosted CI and independent review remain required. The prior6755a53hosted Node/Bun/Deno matrix passed. #160 is merged; its required retrospective is included after integration. No hooks or review requirements were bypassed.This remains the one draft PR for the complete #157 capability. Finish current-head review and release verification, publish npm/GitHub artifacts, then verify a fresh public-registry consumer before downstream WARP adoption. No reservation release or completed Optics integration is claimed.
Refs #157. Consumer: git-stunts/git-warp#1067.