Recovery liveness, storage fault-injection matrix, and one storage implementation over object_store - #203

Merged

ragnorc merged 33 commits into

mainfrom

ragnorc/correctness-vs-symptomatic-fixes

Jun 13, 2026

Commits on Jun 11, 2026

test(engine): pin the long-lived-handle heal contract for sidecar-covered drift
ragnorc
committed
4a551f3
fix(engine): heal pending recovery sidecars at the staged-write entry points
ragnorc
committed
c0f1617
fix(engine): name the right recovery path in the commit-time drift guard
ragnorc
committed
e6a2b85
docs: write-entry in-process sidecar heal — contract and coverage
ragnorc
committed
8c4881f
test(engine): pin the entry heal contract for schema apply and branch merge
ragnorc
committed
f371cdd
fix(engine): heal pending recovery sidecars at the schema-apply and branch-merge entries
ragnorc
committed
ad1e03f

Commits on Jun 12, 2026

test(engine): pin Phase A sidecar-write failure semantics
ragnorc
committed
c465300
test(engine): pin Phase D delete, list, and audit-append storage-fault semantics
ragnorc
committed
ab8dfbc
test(engine): refuse corrupt recovery sidecars loudly
ragnorc
committed
dd26ff2
test(engine): run the S3 sidecar-lifecycle coverage in CI + document the fault matrix
ragnorc
committed
dde29f2
test(engine): pin read-visibility of acknowledged local if-absent writes
ragnorc
committed
3d26638
fix(engine): publish local storage writes with atomic visibility
ragnorc
committed
d7a0144
refactor(engine): one storage implementation over object_store for every backend
ragnorc
committed
26571a3
test(engine): one executable storage contract, run against every backend
ragnorc
committed
7cb3c94
refactor(cluster): drop put_json's per-backend atomicity branch
ragnorc
committed
acb0bc3
docs: storage adapter collapse — contract, in-memory backend, local CAS gap
ragnorc
committed
aa7d7c4
docs: finish renaming the storage adapters in user docs and test comments
ragnorc
committed
7181eaa
Merge origin/main: flush fix superseded by the atomic-visibility redesign
ragnorc
committed
f251b16
test(engine): pin branch-awareness of the drift guard's recovery advice
ragnorc
committed
69dfb88
fix(engine): branch-aware sidecar matching in the drift guard's advice
ragnorc
committed
829334a
test(engine): pin heal non-interference with a live schema apply
ragnorc
committed
0f1dc55
fix(engine): serialize the heal's schema-staging reconcile with live schema applies
ragnorc
committed
9f99d26
test(engine): pin catalog reload after the heal recovers a schema apply
ragnorc
committed
8565390
fix(engine): reload the in-memory catalog after the heal recovers a schema apply
ragnorc
committed
743fe43
test(engine): pin that a deleted-branch sidecar cannot wedge the graph
ragnorc
committed
7e4ee0a
fix(engine): classify deleted-branch sidecars as orphaned instead of wedging
ragnorc
committed
e01fd43
chore: harden review nits — vacuous CI filter, root-runner skip, liveness note
ragnorc
committed
e231168
Merge remote-tracking branch 'origin/main' into ragnorc/correctness-vs-symptomatic-fixes
ragnorc
committed
8fcf0a7
test(engine): pin orphan-discard idempotency across a delete fault
ragnorc
committed
6fadebc
fix(engine): orphan-discard idempotency + heal reports acted-vs-deferred
ragnorc
committed
4cb8551
test(engine): pin the orphan-discard audit-append fault leg as documented tolerance
ragnorc
committed
f2e902e
test(engine): pin honest drift-guard advice when sidecar listing fails
ragnorc
committed
5474a59
fix(engine): admit ambiguity in the drift guard when sidecar listing fails
ragnorc
committed
974a27e

Navigation Menu

Uh oh!

Recovery liveness, storage fault-injection matrix, and one storage implementation over object_store - #203

Recovery liveness, storage fault-injection matrix, and one storage implementation over object_store#203
ragnorc merged 33 commits into
mainfrom
ragnorc/correctness-vs-symptomatic-fixes

Commits on Jun 11, 2026

test(engine): pin the long-lived-handle heal contract for sidecar-covered drift

fix(engine): heal pending recovery sidecars at the staged-write entry points

fix(engine): name the right recovery path in the commit-time drift guard

docs: write-entry in-process sidecar heal — contract and coverage

test(engine): pin the entry heal contract for schema apply and branch merge

fix(engine): heal pending recovery sidecars at the schema-apply and branch-merge entries

Commits on Jun 12, 2026

test(engine): pin Phase A sidecar-write failure semantics

test(engine): pin Phase D delete, list, and audit-append storage-fault semantics

test(engine): refuse corrupt recovery sidecars loudly

test(engine): run the S3 sidecar-lifecycle coverage in CI + document the fault matrix

test(engine): pin read-visibility of acknowledged local if-absent writes

fix(engine): publish local storage writes with atomic visibility

refactor(engine): one storage implementation over object_store for every backend

test(engine): one executable storage contract, run against every backend

refactor(cluster): drop put_json's per-backend atomicity branch

docs: storage adapter collapse — contract, in-memory backend, local CAS gap

docs: finish renaming the storage adapters in user docs and test comments

Merge origin/main: flush fix superseded by the atomic-visibility redesign

test(engine): pin branch-awareness of the drift guard's recovery advice

fix(engine): branch-aware sidecar matching in the drift guard's advice

test(engine): pin heal non-interference with a live schema apply

fix(engine): serialize the heal's schema-staging reconcile with live schema applies

test(engine): pin catalog reload after the heal recovers a schema apply

fix(engine): reload the in-memory catalog after the heal recovers a schema apply

test(engine): pin that a deleted-branch sidecar cannot wedge the graph

fix(engine): classify deleted-branch sidecars as orphaned instead of wedging

chore: harden review nits — vacuous CI filter, root-runner skip, liveness note

Merge remote-tracking branch 'origin/main' into ragnorc/correctness-vs-symptomatic-fixes

test(engine): pin orphan-discard idempotency across a delete fault

fix(engine): orphan-discard idempotency + heal reports acted-vs-deferred

test(engine): pin the orphan-discard audit-append fault leg as documented tolerance

test(engine): pin honest drift-guard advice when sidecar listing fails

fix(engine): admit ambiguity in the drift guard when sidecar listing fails