Repository navigation
Prove served durable completion, projection and recovery hand-off (C2c2e E4) - #265
Merged
Merged
Conversation
…c2e4) Tests only; no production source change was needed. Records written by the real served chain runner (refused terminal publication models the crash) are fed through the coordinator's full boot recovery and the batch consumer: - a settled rejection resumes B once under a new linked attempt, completed B is never re-prompted/re-resolved, and downstream sees only B's committed text; - missing, preparing, prepared, fenced, polled, corrupt, drifted and lineage-conflicting evidence refuses with no provider or accounting effects; - a refusal that cannot be persisted invents no terminal, and a late refusal preserves an existing terminal task; - live delivery and the durable reattach evidence show one node completion with exact locators and one terminal output, matching the ordinary route's provider-reach evidence; Interrupted projects as failed; a primary publication failure prevents downstream execution. Also folds the E3 review smells: served cancellation asserts per-session cleanup exactly once and adds cancel-error/cleanup-error variants that keep ordinary precedence; every boundary handshake sits under one named timeout; the reservation-fault test lets the accounting store create its own schema and adds only the fault trigger. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lane G C2c2e sub-slice E4 (order E2→E3→E4→E1→E5→E6), test-only: served-produced candidate records feed the existing boot/detached/batch recovery, refusal, projection and publication paths with no new recovery format. Production A2A/MCP selection stays disabled.
Verification
CARGO_INCREMENTAL=0, 4 test threads); fmt, clippy-D warnings, hygiene clean; wire SHA equals base.accounting_production::direct_governance::r3_cold_successor_sequence_is_safe,accounting_compatibility::external_store_beneath_regular_file_retains_child_failure_and_continues) under heavy host load; both pass on the host at load 1.2.-p a2a-bridge --tests -D warnings) clean;fallback_workflow159/159;uncapped_order_and_wire_controlbyte-identical to base.owner-conflictcase failed on id decode, not lineage) was fixed in a targeted test-only round with a valid minted id plus a restore-owner control; orchestrator diff check.Deferred (SMELL)
🤖 Generated with Claude Code
https://claude.ai/code/session_017izEynabPeSUBT573AtvaZ