spec: cultnet write receipt (write_admitted, error id echo, admitted/refused/unconfirmed) #59

Merged

libby merged 10 commits from libby/cultnet-write-receipt-spec into main 2026-11-08 19:49:40 +00:00

Conversation 1 Commits 10 Files changed 5 +1282

2026-11-08

Libby

Spec #59: an empty or blank schemaId or recordKey is message_invalid (details.field message, the write's id), never applied; vector for it ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

621b86ca15

• View at this point in history

2026-11-08 19:45:19 +00:00

Libby

Spec #59: receipt writes need a reliable, non-sequenced channel; error.v1 schema description names limit_reached; #55-#58 paragraph states which clients still window-succeed ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

74adad916a

• View at this point in history

2026-11-08 16:59:39 +00:00

Libby

Spec #59: local_send_failed is its own unconfirmed reason ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2c5203dc82

• View at this point in history

2026-11-08 16:34:52 +00:00

Libby

Spec #59: error.v1 code enum names limit_reached; server-wide budget is a conformance column; an overflowed refusal set refuses unseen ids for the session ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

3443e1dc93

• View at this point in history

2026-11-08 16:34:19 +00:00

Libby

Spec #59: id size, digest memory, limit refusals remembered, required fields, reliable channel, local send failure, per-class conformance table ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

734087766a

• View at this point in history

2026-11-08 15:04:21 +00:00

Libby

spec: C# RUDP schema server is not receipt-capable; advertise only if end to end ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

b89a883700

• View at this point in history

2026-11-08 14:58:51 +00:00

Libby

cultnet: add limit_reached to error.v1 code enum, with captured vector ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

eafcdcdf7c

• View at this point in history

2026-11-08 14:29:18 +00:00

Libby

spec: dedupe scope is at least the session; a resend after a reconnect is a new write ...

Per Heimdall's review. The dedupe key lives for the life of its session, bounded per
session without forgetting an id the server promised to answer. A longer retention
is optional and never to be relied on. After a reconnect callers resend only writes
that are idempotent by record key and read back before resending any other.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

7a560b1984

• View at this point in history

2026-11-08 13:58:39 +00:00

Libby

spec: write receipt per Heimdall's review (dedupe by actor+content hash, admitted-late, 5 s window, capability is framing only) ...

- messageId unique per authenticated actor and session; dedupe key (actor, id) bound to SHA-256 of
  [operation, schemaId, recordKey, payload]; same id with other content is message_invalid, never the old receipt.
- A late answer after the window is recorded on the write (admitted_late / refused_late); no blind resend.
- A forwarder with no primary answer relays nothing; the client reports unconfirmed.
- RECEIPT_RESULT_WINDOW_MS 5000 (default), LEGACY_RESULT_WINDOW_MS 500 (fallback only), DEDUPE_RETENTION_MS as vector constants.
- The hello capability changes framing only and never authorizes.
- Batches can commit partially; the caller owns retry.
- Vectors: constants, worked content hashes, 7 dedupe cases, late-answer and window scenarios.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

ab7bc771e3

• View at this point in history

2026-11-08 13:31:49 +00:00

Libby

spec: cultnet write receipt (write_admitted.v0, error.v1 id echo, three-outcome clients) ...

Specification and shared vectors only, no runtime code. A write is answered
exactly once with cultnet.write_admitted.v0 or cultnet.error.v1 carrying its
messageId; the new frames go only to connections whose hello lists them (today's
TS decoder rejects unknown keys and versions, so "old clients ignore it" is
false). Clients settle admitted | refused | unconfirmed; the result window is the
pre-receipt fallback and ends unconfirmed. Wire vectors, schema-invalid cases and
16 replay scenarios in write-receipt-vectors.json.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

662ae048d8

• View at this point in history

2026-11-08 13:28:46 +00:00