Validate every singleton Domain Store row
This commit is contained in:
parent
e4d9cc2dc9
commit
1fd87ba1bd
1 changed files with 36 additions and 11 deletions
|
|
@ -999,9 +999,9 @@ match its policy digest, fingerprint, namespace, and committed RS identity.
|
|||
Intent acquisition is monotonic: optional fields move only absent-to-present,
|
||||
and newly acquired child slots move only `Unassigned` to `Staged` to exact
|
||||
matching current `Committed`. A current committed owner or supervisor may
|
||||
enter a newly created dependent-role snapshot directly and is then immutable;
|
||||
legacy ownership cannot use this rule. Recorded evidence cannot be replaced or
|
||||
cleared. A transition to ReleaseIntent preserves all evidence; PreparedLower
|
||||
enter a newly created dependent-role snapshot directly and is then immutable.
|
||||
Recorded evidence cannot be replaced or cleared. A transition to ReleaseIntent
|
||||
preserves all evidence; PreparedLower
|
||||
changes only its lease phase to `ReleaseIntent`. ReleaseIntent becomes Clean
|
||||
only after independent absence proof and atomically clears every physical
|
||||
field. A bare Intent may become Clean only after the same sealed runtime-absence
|
||||
|
|
|
|||
Loading…
Reference in a new issue