Model checkpoint staging ownership transfer

2026-07-17 15:01:15 +09:00 · 2026-07-17 15:01:15 +09:00 · 16cba3c317
commit 16cba3c317
parent ebf818d23c
1 changed files with 111 additions and 16 deletions
--- a/docs/protocol/RemoraResume.cfg
+++ b/docs/protocol/RemoraResume.cfg
@ -0,0 +1,44 @@
+SPECIFICATION SafetySpec
+
+CHECK_DEADLOCK TRUE
+
+CONSTANTS
+    Jobs = {j1}
+    Workers = {w1}
+    InitialWorkers = {w1}
+    NoJob = NoJob
+    NoWorker = NoWorker
+    MaxAttempts = 2
+    MaxProgress = 2
+    LeaseLimit = 1
+    ReservationLimit = 1
+    LocalLimit = 1
+    GlobalLimit = 1
+    FaultsEnabled = FALSE
+    FaultServices = {}
+    MaxCoordLosses = 0
+    MaxPartitions = 0
+    MaxCredentialIntents = 0
+
+INVARIANTS
+    TypeOK
+    StateConsistency
+    AllocatedTokensUsed
+    LiveProgressWellFormed
+    LiveProgressCompatibleWithLiveLease
+    AtMostOneLiveLeasePerJob
+    AuthorityWellFormed
+    CommittedResultConsistent
+    CancellationSafety
+    PermitSafety
+    ResumeValidity
+    CheckpointStagingOwnership
+    StagingOwnership
+    CredentialLifecycleWellFormed
+    NoOrphanSecrets
+
+PROPERTIES
+    TerminalStateIsImmutable
+    FencingTokensMonotonic
+    CommitIsFencedCAS
+    FailureDispositionHonored