ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Enforce exact recovery ownership before cold start

Browse source
This commit is contained in:
ms2k 2026-07-17 06:48:49 +09:00
commit 2bc5982a62
1 changed files with 1076 additions and 238 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/schema.md
View file

@ -1051,6 +1051,7 @@ classDiagram
<<serialized>>
optional container_id
optional runtime_root
optional runtime_root_identity
optional bundle_digest
host_coordinator
runtime_supervisor
@ -1059,8 +1060,12 @@ classDiagram
class PublicationOwnership {
<<serialized>>
optional staged_socket_path
optional staged_identity_path
optional socket_path
optional identity_path
optional socket_identity
optional identity_file_identity
}
ParticipantOwnership --> PreparedLowerOwnership
@ -1106,8 +1111,8 @@ The only serviceable role/state pairs are:
| `GitRouting` | `Prepared` | three paths, mount, current committed daemon |
| `Network` | `Committed` | policy digest, fingerprint, readiness evidence, namespace, current committed RS |
| `Helper` | `Committed` | sidecar ID, current committed helper and RS |
| `Sandbox` | `Committed` | container, runtime root, bundle digest, current committed HC, RS, and runsc |
| `Publication` | `Committed` | socket and identity paths |
| `Sandbox` | `Committed` | container, runtime root and exact mount/device/inode identity, bundle digest, current committed HC, RS, and runsc |
| `Publication` | `Committed` | staged and exposed fixed labels plus exact socket and identity-file mount/device/inode identities |
Network readiness evidence must name the enclosing Participant generation and
match its policy digest, fingerprint, namespace, and committed RS identity.