3,060 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Libby	34cceedf98	Rust RUDP server: pin the superseded-write refusal against a releasing packet and the half-space bound ... cargo-mutants on the previous commit missed two mutants: `&&` to `||` in the superseded-packet check (a packet that also releases another write hid it) and `<` to `<=` at the half-space bound of sequence_at_or_before. A test and two assertions kill them; the rerun catches 14 of 15 (1 unviable). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:18 +00:00
Libby	4e89f07bff	Rust RUDP server: answer a superseded sequenced write; order frame and packet by serial arithmetic ... Superseded packet: a reliable-sequenced packet that arrives after a newer one delivers no frame, yet is acknowledged and never resent, so its write went unanswered. The test (red first: only "new" was refused, "old" got nothing) showed the drop happens in the session below frame decoding, but an unfragmented packet carries its whole frame, so the server can read the id from the packet payload. Chosen: refuse it from the packet payload. A superseded fragment of a larger write has no readable id in the packet, so write-receipt.md now says that write may go unanswered and the client's unconfirmed outcome covers it. Ordering: frame.sequence <= packet.sequence is replaced by sequence_at_or_before, serial arithmetic modulo 2^32. Deviation from the brief: cultnet-rs' at_or_before carries a 4096-sequence receive window made for duplicate detection; a frame's first fragment may lie further back than that, so reusing it would leave such a sequenced write unrefused and applied. The new test pins that, and a hand mutant with the window fails it. A wrapped sequence cannot reach this compare through the session today (it is judged a duplicate), so the unit test pins the helper, not an end-to-end wrap. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:18 +00:00
Libby	bd2aff8ed0	Rust RUDP server: decide the sequenced-channel refusal per frame ... A sequenced packet's arrival can release held ordered frames in the same delivery; refuse only the packet's own frame. heimdall-low-refuse-sequenced-per-frame. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:04 +00:00
Libby	4f6ee0db83	Rust RUDP server: pin the refusal of blank schemaId/recordKey on receipt sessions ... heimdall-low-rust-keys-untested. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:04 +00:00
Libby	3b1b769762	write-receipt spec: name the platforms that disagree accurately ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:27:17 +00:00
Libby	52204c68c9	write-receipt vectors: U+001C to U+001F and padded names are not blank ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:26:28 +00:00
Libby	db5e8834f3	write-receipt: blank is exactly Unicode White_Space; C# server checks the listed set in one place ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:49 +00:00
Libby	ccbe392b28	write-receipt vectors and tests: blank is Unicode White_Space, every code point checked ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:10 +00:00
Libby	98989f90ea	C# tests: a nil payload names nothing (mutant survivor) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:57:38 +00:00
Libby	bc9a1842f5	C# database server: refuse a put that names nothing, one unreadable text ... IsUnreadableDocument follows the spec's Required fields rule (blank storedAt, empty payload, blank source ids and tags join blank schemaId/recordKey); ForUnreadableMessage is the single owner of the fixed text. Tests replay the blankFields vectors on receipt and legacy connections. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:26:49 +00:00
Libby	e99e9d4bc0	write-receipt spec: one unreadable text, one blank-field rule; Rust server tests pin both ... The unreadable-frame text is 'message_invalid: the message could not be read' (the servers' wording; the Rust wire never carried decoder text, only its local rejection display). A put that names nothing (blank schemaId/recordKey/storedAt, empty payload, blank present source ids or tags) is refused as unreadable on every connection; the vectors' blankFields section lists the cases and the Rust server tests replay them. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:26:49 +00:00
Libby	7665df33ae	Merge pull request 'TS: write_admitted / error.v1 decoder, WriteTracker, vector replay runner' (#62) from libby/ts-write-receipt-client into main	2026-11-08 19:52:37 +00:00
Libby	92b4cb7ce9	Merge pull request 'C#: database server answers writes with write_admitted / error.v1 (write-receipt spec)' (#61) from libby/cs-write-receipt-server into main	2026-11-08 19:51:52 +00:00
Libby	36494dafb9	Merge pull request 'cultmesh-rs: RUDP document server answers writes with write_admitted / error.v1' (#60) from libby/rs-write-receipt-server into main	2026-11-08 19:49:50 +00:00
Libby	5bf2428295	Merge pull request 'spec: cultnet write receipt (write_admitted, error id echo, admitted/refused/unconfirmed)' (#59) from libby/cultnet-write-receipt-spec into main	2026-11-08 19:49:40 +00:00
Libby	1a228349f1	C#: a put or delete with an empty or blank schemaId or recordKey is refused message_invalid (as an unreadable frame, like the Rust server) and not applied ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:46:45 +00:00
Libby	621b86ca15	Spec #59: an empty or blank schemaId or recordKey is message_invalid (details.field message, the write's id), never applied; vector for it ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:45:19 +00:00
Libby	90d252735f	cultmesh-rs: a refused reliable-sequenced write is received and acknowledged first, and a refused write counts as session activity ... Refusing before session.receive left the packet unacknowledged: the client resent it forever and every later ordered write stalled. The test now uses the same peer and proves a later ordered write is admitted. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:38:43 +00:00
Libby	dc1ae51e92	cultmesh-ts: publishRudpDocumentOnce builds the put before connecting, so a put that cannot be built keeps its cause on both paths ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:37:08 +00:00
Libby	0fbf2baea6	cultnet-ts, cultmesh-ts: Heimdall's five Lows on send-only (spec wording, error.v1 ack-time refusal tests, build errors keep their cause, presence changelog, ack-cut anchors) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:32:49 +00:00
Libby	89ff3d2cbd	cultnet-ts test: the Odin presence publisher is send-only, so a refusal after the transport ack is not awaited ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:26:25 +00:00
Libby	206dbe142b	cultmesh-ts: sendOnly tests use one fake server per publish (the reused one threw on the second connect and hung the run); spec names send-only and the presence publisher ... The hang was the fake server, not the writer: it is bound to one connection id, and two publishes in one test sent a second connect it rejected from inside the socket handler. The unacknowledged-send test also scripted an admit, whose reply piggybacks the put's ack. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:24:52 +00:00
Libby	0caef4d564	WIP (unverified): publishRudpDocumentOnce sendOnly + presence publisher send-only; tests written, cultmesh-ts receipt-client run hung ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:24:52 +00:00
Libby	c89c4ee39a	cultmesh-ts: test kills the flush-cap mutant ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:07:54 +00:00
Libby	af1ac72359	cultmesh-ts, cultnet-ts: only write_admitted admits a put (no echo admission); the send is bounded by the result window and a timeout is local_send_failed ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:05:42 +00:00
Libby	293b4e83bc	cultmesh-ts, cultnet-ts: an unanswered put is unconfirmed on every server, session_ended before a result is an error, a failed local send is its own reason ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	a67faad27c	cultnet-ts: tests for two tracker mutants (send expires other windows; non-answer frames settle nothing) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	6eea66c57f	cultnet-ts, cultmesh-ts: write receipt client (frames, WriteTracker, replay runner, opt-in writer) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:39 +00:00
Libby	34bf7aa0ee	C#: test kills the schema id detail-value mutant ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:36 +00:00
Libby	40b34295e3	C#: receipt writes need a reliable, non-sequenced channel; a refusal without a record key or schema id carries a null detail value ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:01:59 +00:00
Libby	e4b67a9e0b	cultmesh-rs: a receipt session accepts writes only on a reliable, non-sequenced channel; a test pins that a reconnect starts a fresh session ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:00:48 +00:00
Libby	74adad916a	Spec #59: receipt writes need a reliable, non-sequenced channel; error.v1 schema description names limit_reached; #55-#58 paragraph states which clients still window-succeed ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:59:39 +00:00
Libby	48cf3b3323	C#: tests kill the replay-details and unreliable non-write mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:45:29 +00:00
Libby	0a67b4d8aa	C#: a remembered refusal keeps its code and field, never the write's strings, and replays in fixed text; a write on an unreliable channel of a receipt session is refused message_invalid (channel) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:42:22 +00:00
Libby	1a05df2524	cultmesh-rs: server-wide remembered-write budget is a maintained counter; a session whose refusal set overflowed refuses unseen ids after the budget frees ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:36:10 +00:00
Libby	2c5203dc82	Spec #59: local_send_failed is its own unconfirmed reason ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:34:52 +00:00
Libby	3443e1dc93	Spec #59: error.v1 code enum names limit_reached; server-wide budget is a conformance column; an overflowed refusal set refuses unseen ids for the session ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:34:19 +00:00
Libby	c8f869e54e	cultnet-rs, cultmesh-rs: null or missing document/schemaId refused naming the field; budget tests use literal bytes; unreliable-refusal local failure test ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:32:03 +00:00
Libby	d7b36416c6	cultmesh-rs: pin limit-refusal memory bound and legacy unreliable drop (mutant-driven tests) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:30:36 +00:00
Libby	ef5cd88111	C#: v0 errors for snapshot, shard log and variant refusals carry fixed text, never an exception's message ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:13:58 +00:00
Libby	d654cb2b99	C#: tests kill the refusal-set bound and abandoned-rehash mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:12:31 +00:00
Libby	1447ccd8dd	cultnet-rs, cultmesh-rs: write_admitted in spec field order; server-wide remembered-write budget over digest entries; id size limit; limit refusals remembered; unreliable writes refused; local failure is its own goodbye ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:09:28 +00:00
Libby	c4d1efe000	C#: receipt ids capped at 256 bytes and held as digests; limit refusals remembered, no slot freed; required fields refused with fixed text; RUDP server advertises no receipt frames ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:07:23 +00:00
Libby	734087766a	Spec #59: id size, digest memory, limit refusals remembered, required fields, reliable channel, local send failure, per-class conformance table ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:04:21 +00:00
Libby	541d734675	C#: a forward is retryable only when provably not sent; unconfirmed otherwise; refusals carry fixed text ... CultNetWriteNotSentException names the pre-send boundary (connect, hello, no endpoint, or a send port that proves nothing was written). Every other forwarding failure keeps the session claim. ForUnownedSchema and the routing refusal no longer carry exception text. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:02:56 +00:00
Libby	b89a883700	spec: C# RUDP schema server is not receipt-capable; advertise only if end to end ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:58:51 +00:00
Libby	2e5df24e96	C#: loopback test for the unreadable-frame answer; Server.Port seam; the answer now reaches the wire ... An undecodable frame is classed legacy by Decode, so the schema-side guard was unreachable and a receipt peer was never answered. The guard moves to the legacy decode. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:58:17 +00:00
Libby	74b8a4cbf8	C#: drop the redundant Silent state of a write claim (a silent claim is an unanswered one) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:53:05 +00:00
Libby	0182a6d40b	cultnet-rs, cultmesh-rs: remembered-write cap refusal is error.v1 limit_reached; pin authorize-once with a counting sink ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:32:49 +00:00
Libby	ed5f9d30d1	C#: receipt server follows Heimdall's review of #61 ... Look the id up first and authorize only on first sighting; remember refusals within the cap; never re-forward an id whose primary stayed silent; end the connection when an answer cannot be queued; fixed refusal texts; limit_reached cap refusal; commit-point doc on ApplyPut/Delete. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:32:39 +00:00