ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Retire the mutable design schema

Browse source 
Make Rust records and fixed codec tests the implementation-shape owner, remove the Mermaid category registry, and state the ownership boundary in the authoritative specification.
This commit is contained in:
ms2k 2026-07-19 02:45:32 +09:00
commit 03bfe92ca0
1 changed files with 17 additions and 1679 deletions
Download patch file Download diff file Expand all files Collapse all files

22
docs/specification.md
View file

@ -184,8 +184,8 @@ initiated by a host Lazaret CLI invocation, not by a resident scheduler.
### 3.2 Trusted Host Configuration Refinement
The non-authoritative repository [design schemas](schema.md) mirror the closed
v1 trusted-host configuration described by this refinement. Lazaret chooses its
Rust configuration records and their codec tests own the closed v1 document
shape described by this refinement. Lazaret chooses its
configuration file from an explicit host CLI option or, when absent, from
`$XDG_CONFIG_HOME/lazaret/config.toml`, with
`$HOME/.config/lazaret/config.toml` as the XDG fallback. It derives the Storage
@ -562,7 +562,7 @@ Disconnected Client Sessions close rather than reattach to an unbounded scrollba
owned by the coordinator.
The session connection carries the terminal events and messages described by
this refinement. The non-authoritative repository schema mirrors their v1
this refinement. Rust protocol records and fixed codec tests own their v1
encoding. One Host Coordinator event loop serializes input, resize, signal,
close, prompt-routing, PTY output, and exec-client completion for each Session
ID. It uses bounded queues and PTY
@ -818,10 +818,10 @@ before network ownership records readiness. Sessions and the generation mailbox
are separate generation records. Deterministic paths are lookup hints for
physical recovery, not ownership proofs.
The non-authoritative repository [design schemas](schema.md) mirror the logical
records and relationships described by these refinements. Implementations must
preserve the distinct Domain Store and Storage Catalog authority boundaries and
the independently recoverable ownership described above.
Rust durable records and their codec tests own the store row shapes described
by these refinements. Implementations must preserve the distinct Domain Store
and Storage Catalog authority boundaries and the independently recoverable
ownership described above.
Lazaret v1 stores the catalog in redb. Each catalog operation holds the
host-wide Storage Catalog lock for one bounded open, transaction, and close
@ -915,9 +915,9 @@ and publication gates follow the protocol model.
#### Derived policy and readiness encoding
The non-authoritative repository [design schemas](schema.md) mirror the v1
policy, attestation, readiness-identity projection, and fingerprint inputs
described by this refinement.
Rust network records and fixed codec tests own the v1 policy, attestation,
readiness-identity projection, and fingerprint encodings described by this
refinement.
The v1 policy transport passes canonical bytes through a write-sealed inherited
memfd. The Runtime Supervisor verifies the seals and digest, installs the policy,
@ -970,7 +970,7 @@ handles. Host-only CLI/coordinator control may use host-private Unix sockets tha
are never mounted into the Agent Sandbox.
Mailbox files carry the signed protocol records described by this refinement;
the non-authoritative repository schema mirrors their v1 encoding. TLS is not
Rust protocol records and fixed codec tests own their v1 encoding. TLS is not
layered over the regular-file transport. HC opens each ready entry relative to a
confined directory handle,
rejects links and non-regular files, bounds the complete file before allocation,