ms2k/remora
SHA256
Watch
0
Code Releases Activity

Define manifest-rooted result architecture

Browse source
This commit is contained in:
ms2k 2026-07-13 12:43:55 +09:00
commit a9f611e4f0
1 changed files with 24 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/protocol/Remora.tla
View file

@ -7,8 +7,9 @@ EXTENDS Naturals, FiniteSets, TLC
\* allocation, fencing tokens, and committed results. CoordinationStore variables
\* are reconstructible: queues, reservations, leases, cancel notices, live progress.
\* Attempts remain observable after losing authority so delayed outcomes and zombie
\* target writes are checked. Each attempt uses an attempt-specific staging identity;
\* only the durable AcceptSuccess compare-and-swap publishes a CommittedResult.
\* target writes are checked. An attempt staging identity abstracts its immutable
\* member set and result manifest; only the durable AcceptSuccess compare-and-swap
\* selects that manifest descriptor as the CommittedResult.
\*
\* Abstractions and bounds:
\* - Jobs in Init are already durably accepted (submission outbox precedes queueing).