GameCult/Idunn
Watch
9
0
Fork
You've already forked Idunn
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record Q-V8 ruled B: verify runs as its own unit; Cut 2 is unblocked

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Meta Vens 2026-09-22 15:25:38 +02:00
commit e01ce88e61
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/verify-transaction-cut.md
View file

@ -469,7 +469,9 @@ client surface to reuse.
Depends: the Cut 3 store split and modes, Cut 6 provisioning, and the Cut 7
negative checks.
**Q-V8. What process topology?**
**Q-V8: RULED B by the operator, 2026-09-22 ("agreed").** Verify runs as a separate unit, `idunn-verify.service`, which runs `idunn verify-serve` from the same binary. It has its own stores and lock, and its `ReadWritePaths` are narrowed to its own roots and the `/srv/build` cache. It protects daemon survival and privilege isolation.
*History, the question as asked:* **Q-V8. What process topology?**
- A: a verify thread inside `idunn serve`.
- B: a separate unit, `idunn-verify.service`, running `idunn verify-serve` from
the same binary. It has its own stores and lock, and narrower