Specify fenced activation and source credential contracts

Define bounded reservation recovery, exact activation replay fencing, immutable source identities, and deployment-owned secret and target policy boundaries. Align the OpenAPI contract and add a split-store activation safety refinement.
This commit is contained in:
ms2k 2026-07-14 18:12:28 +09:00
commit 033cfeaac6

View file

@ -0,0 +1,28 @@
SPECIFICATION Spec
CHECK_DEADLOCK TRUE
CONSTANTS
Claims = {c1}
Fences = {f1, f2}
Workers = {w1, w2}
Operations = {op1, op2}
NoWorker = NoWorker
NoOwner = NoOwner
NoRequest = NoRequest
NoResponse = NoResponse
Accepted = Accepted
Rejected = Rejected
INVARIANTS
TypeOK
LiveLeaseMatchesAuthority
ExecutingIsCommitted
AcceptedResponseIsExactReplay
ConflictIsChangedRequest
ReapedClaimHasNoActivationEffect
ReapedCoordinationIsClean
PROPERTIES
ActivationAppliesAtMostOnce
OperationRequestIsImmutable