GameCult/Idunn
Watch
9
0
Fork
You've already forked Idunn
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Idunn/tests/fixtures
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Meta Vens 9e5b7f84fd Close the B1 transition: lift, precondition, boot reconciliation, closed history 
Soul found B1's rule sound and its transition unsafe. This makes the rule's
old inputs impossible to reintroduce a stuck state from.

- The control store's legacy lift owns the transition. A pre-B1 continuity
  abort that issued an activation lifts with topology_reconciliation Pending,
  so the one resolution demotes its own activation. A record already terminal
  under the old rule is reopened at Starting, since a terminal record cannot
  owe work. History lifts records as written. Before this, one resident
  record of that shape failed validation and ControlSnapshot::read refused the
  whole store, so Idunn could not boot.
- Supervision owns the Expected-only precondition. When its pre-restart
  demotion fails it mints no continuity and writes next_restart_at_unix_millis
  on the generation's ContinuityBackoff (attempts and window untouched), so it
  neither restarts over an undemotable projection nor retries every tick.
- Boot reconciles once: a projected activation that exactly matches the
  activation a failed continuity in history (or a resident terminal record)
  issued is demoted. Nothing is adopted; an activation no admitted generation,
  live transaction or failed issuer accounts for is reported and left alone.
  New read-only CultCacheTopologyDriver::projected_activation.
- Unreadable history.cc fails closed. The continuity restart ceiling and the
  consumed-command check no longer read an empty history; they stop, and the
  fault is reported once while it lasts (ReportOnce). The undecodable-record
  report is a pure function, pinned.
- docs/deployment-authority.md no longer says the projection never drifts.

Tests: legacy fixtures written by the 9001b58 encoder for the three abort
shapes (a second throwaway generator, see the fixtures README), driven through
the Engine; the seeded-transaction helper now takes a command kind and an
incumbent, and a Deploy carries a frozen-source receipt and a signed brake
release, so Deploy commit, Deploy pre- and post-fence aborts and a continuity
abort over an incumbent run through the real phase machine.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-29 06:11:29 +02:00
..
idunn-control-legacy Close the B1 transition: lift, precondition, boot reconciliation, closed history 2026-09-29 06:11:29 +02:00
bifrost-release-authority-v1.payload.hex Gate Yggdrasil releases through Bifrost 2026-07-16 18:34:26 +01:00
README.md Gate Yggdrasil releases through Bifrost 2026-07-16 18:34:26 +01:00

README.md

Bifrost release-authority wire fixture

bifrost-release-authority-v1.payload.hex is the exact MessagePack payload emitted on 2026-07-16 by Bifrost's TypeScript CultCache writer tools/bifrost-repository-release-authority.mjs for GameCult/Epiphany, refs/heads/main, commit 0123456789abcdef0123456789abcdef01234567.

It is checked in because the TypeScript runtime emits a camelCase MessagePack map while Rust DatabaseEntry derives tuple payloads. Idunn must prove it can decode the producer's real wire shape rather than round-tripping a fixture it serialized itself.