Select multi-process SC architecture and align protocol model

Promote Host Coordinator + Runtime Supervisor + attached runsc as the product
architecture in the specification, and extend the TLA+ model with generation-scoped
identities, multi-role durable intent, network readiness, prepared-lower lease, and
connectivity-helper ownership. TLC-checked; trim product prose that the model now owns.
This commit is contained in:
ms2k 2026-07-10 02:37:48 +09:00
commit 518c0ad531

View file

@ -90,6 +90,11 @@ INVARIANTS
FailedDomainIsolation
OrderedFailureRecovery
ResultDeliveryStateConsistent
MultiRoleDurableIntent
GenerationScopedIdentitiesDistinct
HelperUnderSupervisor
PreparedLowerLeaseBeforeMount
NetworkReadyBeforePublish
PROPERTIES
SessionEventuallyResolves