From e01ce88e6166b76edd3cc34c3e6edad7a45ffcf0 Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Tue, 22 Sep 2026 15:25:38 +0200 Subject: [PATCH] Record Q-V8 ruled B: verify runs as its own unit; Cut 2 is unblocked Co-Authored-By: Claude Opus 5 --- docs/verify-transaction-cut.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/verify-transaction-cut.md b/docs/verify-transaction-cut.md index ff9b9ba..84dfe00 100644 --- a/docs/verify-transaction-cut.md +++ b/docs/verify-transaction-cut.md @@ -469,7 +469,9 @@ client surface to reuse. Depends: the Cut 3 store split and modes, Cut 6 provisioning, and the Cut 7 negative checks. -**Q-V8. What process topology?** +**Q-V8: RULED B by the operator, 2026-09-22 ("agreed").** Verify runs as a separate unit, `idunn-verify.service`, which runs `idunn verify-serve` from the same binary. It has its own stores and lock, and its `ReadWritePaths` are narrowed to its own roots and the `/srv/build` cache. It protects daemon survival and privilege isolation. + +*History, the question as asked:* **Q-V8. What process topology?** - A: a verify thread inside `idunn serve`. - B: a separate unit, `idunn-verify.service`, running `idunn verify-serve` from the same binary. It has its own stores and lock, and narrower