Harden WebBFF and deployment release behavior

Model fail-closed cross-replica session renewal and implement owner-fenced refresh, transient observer handling, logout fencing, and graceful shutdown. Remove chart-owned Ingress while retaining qualification-owned external routing.
This commit is contained in:
ms2k 2026-07-20 17:09:26 +09:00
commit 414b380516

View file

@ -0,0 +1,20 @@
SPECIFICATION FairSpec
CHECK_DEADLOCK FALSE
CONSTANTS
Replicas = {r1, r2}
NoReplica = NoReplica
AllowTakeover = FALSE
AllowAmbiguousRelease = FALSE
ObserverDestroysOwned = FALSE
INVARIANTS
TypeOK
ProviderRefreshSerialized
CommitIsOwnerFenced
ObserverPreservesOwnedRenewal
PROPERTIES
TerminalSessionIsPermanent
EventuallyTerminal