cultmesh-rs: RUDP document server answers writes with write_admitted / error.v1 #60

Merged

libby merged 11 commits from libby/rs-write-receipt-server into main 2026-11-08 19:49:50 +00:00

Conversation 0 Commits 11 Files changed 5 +2057 -102

2026-11-08

Libby

cultmesh-rs: a refused reliable-sequenced write is received and acknowledged first, and a refused write counts as session activity ...

Refusing before session.receive left the packet unacknowledged: the client resent it forever and every later ordered write stalled. The test now uses the same peer and proves a later ordered write is admitted.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

90d252735f

• View at this point in history

2026-11-08 19:38:43 +00:00

Libby

cultmesh-rs: a receipt session accepts writes only on a reliable, non-sequenced channel; a test pins that a reconnect starts a fresh session ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

e4b67a9e0b

• View at this point in history

2026-11-08 17:00:48 +00:00

Libby

cultmesh-rs: server-wide remembered-write budget is a maintained counter; a session whose refusal set overflowed refuses unseen ids after the budget frees ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

1a05df2524

• View at this point in history

2026-11-08 16:36:10 +00:00

Libby

cultnet-rs, cultmesh-rs: null or missing document/schemaId refused naming the field; budget tests use literal bytes; unreliable-refusal local failure test ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

c8f869e54e

• View at this point in history

2026-11-08 15:32:03 +00:00

Libby

cultmesh-rs: pin limit-refusal memory bound and legacy unreliable drop (mutant-driven tests) ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

d7b36416c6

• View at this point in history

2026-11-08 15:30:36 +00:00

Libby

cultnet-rs, cultmesh-rs: write_admitted in spec field order; server-wide remembered-write budget over digest entries; id size limit; limit refusals remembered; unreliable writes refused; local failure is its own goodbye ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

1447ccd8dd

• View at this point in history

2026-11-08 15:09:28 +00:00

Libby

cultnet-rs, cultmesh-rs: remembered-write cap refusal is error.v1 limit_reached; pin authorize-once with a counting sink ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

0182a6d40b

• View at this point in history

2026-11-08 14:32:49 +00:00

Libby

cultmesh-rs: a put reusing a delete's id is refused (mutant-driven test) ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

5f699c27fa

• View at this point in history

2026-11-08 14:27:54 +00:00

Libby

cultmesh-rs: receipt server looks the id up first, remembers refusals, answers deletes and unqueueable refusals ...

Follows Heimdall's second review of #60: replay by (session,id) before any
authorization; refusals stored with their hash; delete shares the dedupe
table and settles capability; a refusal the queue cannot take ends the
session; a peer's refusal frames and a receipt session's refused deletes are
not violations; the write limit has its own fixed text; the sink trait says
Ok means committed and visible.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

d4f440ac7c

• View at this point in history

2026-11-08 14:22:50 +00:00

Libby

cultmesh-rs: receipt server follows Heimdall's review of #60 ...

A refused put, a full dedupe table and a reused id refuse the write, not the
session; only a protocol violation ends one. A frame that does not decode but
holds a messageId is refused with that id. The server answers a receipt-capable
hello with its own, listing both frames. The sink's authorization (new
authorize_raw_document, default admit) runs before the session's remembered
writes are consulted. A second hello does not change the capability: it is set
once, by the first hello or the first write. A receipt that cannot be queued, and
a write the payload budget would drop silently, end the session instead of
leaving the write unanswered. Refusals to a receipt-capable session are queued
reliably.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

8bd31a5d4a

• View at this point in history

2026-11-08 13:56:17 +00:00

Libby

cultmesh-rs: RUDP document server answers writes with write_admitted / error.v1 (write-receipt spec) ...

cultnet-rs gains cultnet.write_admitted.v0, cultnet.error.v1 (v0 + messageId) and
write_content_hash. The server opts a session in only when its hello lists both frames
(framing only; admission rules are unchanged). On an opted-in session an admitted put is
answered with a receipt carrying its id after the sink accepts it, a refusal is an error.v1
naming the id, a resend of the same content is re-receipted without reaching the sink, and the
same id with other content is refused message_invalid (never the old receipt). Other sessions
are answered exactly as before.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

9f73047c29

• View at this point in history

2026-11-08 13:38:46 +00:00