Check host coordinator domain ownership
Add a TLC-checked invariant requiring any Host Coordinator process record to belong to a non-absent, lock-held Domain. Include the invariant in the aggregate safety operator and remove journal-only markers from protocol model comments so the model remains grounded in product vocabulary.
This commit is contained in:
parent
9b88a48b15
commit
697aada29e
1 changed files with 16 additions and 11 deletions
|
|
@ -66,6 +66,7 @@ INVARIANTS
|
|||
SupervisorLeaseConsistency
|
||||
RuntimeResourceOwnership
|
||||
CoordinatorPhysicalConsistency
|
||||
HostCoordinatorRequiresDomainOwnership
|
||||
NoVanishPresentRuntime
|
||||
OrderedLeaseTeardown
|
||||
DomainGenerationBounds
|
||||
|
|
|
|||
Loading…
Reference in a new issue