Repository navigation
Conversation
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
This was referenced Oct 21, 2026
Draft
Exercise real process termination before and after claim commit, after a synthetic durable effect, and after final commit. Add an uninterrupted positive twin and SQLite commit-refusal controls. Rename the simulated-state test and document orphaned precommit evidence and explicit recovery limits. Prepared with OpenAI Codex. Refs agentrust-io#144. Signed-off-by: Srinivasa Dinakar Jainti <dinakarjs@gmail.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A lost witness acknowledgement can follow a committed submission. This draft stages exact checkpoint bytes and pinned trust policy in SQLite, commits one claim before capture, retains exclusive evidence, and leaves failed/interrupted attempts unknown or inflight. There is no automatic retry or reset.
Current head:
d2f25347326a18f404942c50ba5f24ce5eebc614. Bounded maintenance under the existing draft; runtime source is unchanged by this follow-up. New subprocess controls kill workers before claim commit, after claim commit, after a durable synthetic effect and after final commit. An uninterrupted worker is the positive twin; separate SQLite authorization faults refuse the first or second commit. Renamed the old SQL-state test to identify it as simulated.Validation: full local unittest suite 416 passed; final journal selection ten methods passed after a test-name-only cleanup. Ruff, pip check and whitespace pass. Changing the durable claim to remain pending produces three behavioral subtest failures, then source restored. Published tree
83f417edee9f3daf4e10b32832b18ae0087d5c40matches local.Limits: transport/effect fixtures are synthetic; process-kill and transaction-refusal tests do not establish power-loss/fsync/device durability or external-witness recovery. A killed precommit attempt can leave a pending row plus exclusive evidence directory requiring manual inspection. Post-effect uncertainty cannot become verified or retryable.
Parked after validation: resume when maintainers choose operational/readback, rotation, retention/backups and publication policy, or concrete review feedback arrives. #156 remains the separate readback proposal. No external witness submission, scheduling, automatic reconciliation or deployment. Prepared with OpenAI Codex; DCO signed.
Hosted follow-through: CI run 42491074747 and CodeQL run 42491074977 passed on
d2f25347326a18f404942c50ba5f24ce5eebc614. The PR remains draft for the operational/readback/retention decisions and independent review; no automatic retry or deployment is enabled.