ms2k/remora
SHA256
Watch
0
Code Releases Activity

Require executing authority for lease renewal.

Browse source 
RenewLease now demands current durable authority, AttemptExecuting, and a
non-terminal phase so a live lease cannot be extended after authority loss.
Align the mutable API renew prose with that precondition.
This commit is contained in:
ms2k 2026-07-15 16:59:35 +09:00
commit 0834f291d9
1 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/protocol/Remora.tla
View file

@ -307,9 +307,13 @@ ActivateAttempt(a) ==
resumedFromCheckpoint, stageState, pendingOutcome>>
RenewLease(a) ==
LET w == attemptWorker[a]
LET j == JobOf(a)
w == attemptWorker[a]
IN /\ leaseState[a] = LeaseLive
/\ leaseAge[a] > 0
/\ CurrentAuthority(a)
/\ attemptState[a] = AttemptExecuting
/\ phase[j] \notin TerminalPhases
/\ workerState[w] = WorkerUp
/\ CanReach(w, CoordSvc)
/\ leaseAge' = [leaseAge EXCEPT ![a] = 0]