Harden WebBFF and deployment release behavior
Model fail-closed cross-replica session renewal and implement owner-fenced refresh, transient observer handling, logout fencing, and graceful shutdown. Remove chart-owned Ingress while retaining qualification-owned external routing.
This commit is contained in:
parent
ffa65018ed
commit
414b380516
1 changed files with 980 additions and 136 deletions
20
docs/protocol/WebSessionRenewal.cfg
Normal file
20
docs/protocol/WebSessionRenewal.cfg
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
SPECIFICATION FairSpec
|
||||
|
||||
CHECK_DEADLOCK FALSE
|
||||
|
||||
CONSTANTS
|
||||
Replicas = {r1, r2}
|
||||
NoReplica = NoReplica
|
||||
AllowTakeover = FALSE
|
||||
AllowAmbiguousRelease = FALSE
|
||||
ObserverDestroysOwned = FALSE
|
||||
|
||||
INVARIANTS
|
||||
TypeOK
|
||||
ProviderRefreshSerialized
|
||||
CommitIsOwnerFenced
|
||||
ObserverPreservesOwnedRenewal
|
||||
|
||||
PROPERTIES
|
||||
TerminalSessionIsPermanent
|
||||
EventuallyTerminal
|
||||
Loading…
Reference in a new issue