Specify fenced activation and source credential contracts
Define bounded reservation recovery, exact activation replay fencing, immutable source identities, and deployment-owned secret and target policy boundaries. Align the OpenAPI contract and add a split-store activation safety refinement.
This commit is contained in:
parent
3881514e4b
commit
033cfeaac6
1 changed files with 877 additions and 49 deletions
28
docs/protocol/RemoraClaimActivation.cfg
Normal file
28
docs/protocol/RemoraClaimActivation.cfg
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
SPECIFICATION Spec
|
||||
|
||||
CHECK_DEADLOCK TRUE
|
||||
|
||||
CONSTANTS
|
||||
Claims = {c1}
|
||||
Fences = {f1, f2}
|
||||
Workers = {w1, w2}
|
||||
Operations = {op1, op2}
|
||||
NoWorker = NoWorker
|
||||
NoOwner = NoOwner
|
||||
NoRequest = NoRequest
|
||||
NoResponse = NoResponse
|
||||
Accepted = Accepted
|
||||
Rejected = Rejected
|
||||
|
||||
INVARIANTS
|
||||
TypeOK
|
||||
LiveLeaseMatchesAuthority
|
||||
ExecutingIsCommitted
|
||||
AcceptedResponseIsExactReplay
|
||||
ConflictIsChangedRequest
|
||||
ReapedClaimHasNoActivationEffect
|
||||
ReapedCoordinationIsClean
|
||||
|
||||
PROPERTIES
|
||||
ActivationAppliesAtMostOnce
|
||||
OperationRequestIsImmutable
|
||||
Loading…
Reference in a new issue