Select multi-process SC architecture and align protocol model
Promote Host Coordinator + Runtime Supervisor + attached runsc as the product architecture in the specification, and extend the TLA+ model with generation-scoped identities, multi-role durable intent, network readiness, prepared-lower lease, and connectivity-helper ownership. TLC-checked; trim product prose that the model now owns.
This commit is contained in:
parent
697aada29e
commit
518c0ad531
1 changed files with 614 additions and 246 deletions
|
|
@ -90,6 +90,11 @@ INVARIANTS
|
|||
FailedDomainIsolation
|
||||
OrderedFailureRecovery
|
||||
ResultDeliveryStateConsistent
|
||||
MultiRoleDurableIntent
|
||||
GenerationScopedIdentitiesDistinct
|
||||
HelperUnderSupervisor
|
||||
PreparedLowerLeaseBeforeMount
|
||||
NetworkReadyBeforePublish
|
||||
|
||||
PROPERTIES
|
||||
SessionEventuallyResolves
|
||||
|
|
|
|||
Loading…
Reference in a new issue