ms2k/remora
SHA256
Watch
0
Code Releases Activity

Strengthen JobProtocol model after independent review.

Browse source 
Replace tautological invariants with non-trivial ones, allow multi-shot
coordination loss and re-partition, fix reap/progress lifecycle, enable
deadlock checking via Done, and add stress and multi-shot TLC configs.
This commit is contained in:
ms2k 2026-07-10 12:43:32 +09:00
commit 7d490194c3
1 changed files with 342 additions and 124 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/protocol/RemoraLocal.cfg
View file

@ -1,6 +1,6 @@
SPECIFICATION SafetySpec
CHECK_DEADLOCK FALSE
CHECK_DEADLOCK TRUE
\* Local contention: the global limit permits every worker-local slot.
CONSTANTS
@ -16,19 +16,21 @@ CONSTANTS
GlobalLimit = 3
FaultsEnabled = FALSE
FaultServices = {}
MaxCoordLosses = 0
MaxPartitions = 0
INVARIANTS
TypeOK
StateConsistency
AtMostOneAuthoritativeAttempt
FencingTokensUnique
AllocatedTokensUsed
LiveProgressAligned
AtMostOneLiveLeasePerJob
AuthorityWellFormed
CommittedResultConsistent
CancellationSafety
PermitSafety
QueueRecoverable
AttemptIsolation
ResumeValidity
ZombieIsolation
StagingOwnership
PROPERTIES
TerminalStateIsImmutable