Repository navigation
Recover binary worker ownership and reserve native save outcomes - #98
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Shrinking binary restores could move more bytes into the private namespace than the quota allowed, replace the source, then fail to record the outcome. Native preflight now reserves displaced logical size and both intent/acknowledgement publication peaks before any source effect. Sparse quota regressions check both boundaries, unchanged source/draft on refusal and successful restore after releasing space.
Explicit owner recovery now settles matching filesystem-only activity records using a borrowed exclusive document-lock proof bound to the configured private root. It refuses live local controls and another root, leaves generic native activity untouched and never manufactures a file receipt. Missing recovery locks are not recreated, and live stores recheck lock identity. The guide and implementation notes document the remaining save activation gates.
Validation: 60 binary core tests, 4 runtime ownership/proof tests and all 23 production file-route tests passed locally. Core/server library/test Clippy, formatting, generated checks and all 114 strict OpenSpec items passed. The ordinary ignored native child helper is invoked by its parent test. Linux/macOS/Windows CI remains required for this head.
Production source save/restore, version/FileChanged integration, model operations and terminal editing remain tracked in #94.
Refs #94.