Separate protocol authority from mutable API contracts
Move API artifacts out of docs/spec, define concrete execution and deletion refinements, and document TLA+ abstraction boundaries so architecture prose cannot become a competing protocol specification.
This commit is contained in:
parent
78be27871c
commit
dfd60cf104
1 changed files with 316 additions and 73 deletions
|
|
@ -3,6 +3,7 @@ EXTENDS Naturals, FiniteSets
|
|||
|
||||
\* This model covers the durable API operation ledger around an abstract
|
||||
\* JobProtocol effect; JobProtocol remains the sole phase-transition model.
|
||||
\* Identities range over one retention epoch; record expiry is outside the model.
|
||||
|
||||
CONSTANTS
|
||||
OperationScopes, EligibilityClaims, OperationIds, MutationKinds,
|
||||
|
|
|
|||
Loading…
Reference in a new issue