ms2k
033cfeaac6
Define bounded reservation recovery, exact activation replay fencing, immutable source identities, and deployment-owned secret and target policy boundaries. Align the OpenAPI contract and add a split-store activation safety refinement.
28 lines
574 B
INI
28 lines
574 B
INI
SPECIFICATION Spec
|
|
|
|
CHECK_DEADLOCK TRUE
|
|
|
|
CONSTANTS
|
|
Claims = {c1}
|
|
Fences = {f1, f2}
|
|
Workers = {w1, w2}
|
|
Operations = {op1, op2}
|
|
NoWorker = NoWorker
|
|
NoOwner = NoOwner
|
|
NoRequest = NoRequest
|
|
NoResponse = NoResponse
|
|
Accepted = Accepted
|
|
Rejected = Rejected
|
|
|
|
INVARIANTS
|
|
TypeOK
|
|
LiveLeaseMatchesAuthority
|
|
ExecutingIsCommitted
|
|
AcceptedResponseIsExactReplay
|
|
ConflictIsChangedRequest
|
|
ReapedClaimHasNoActivationEffect
|
|
ReapedCoordinationIsClean
|
|
|
|
PROPERTIES
|
|
ActivationAppliesAtMostOnce
|
|
OperationRequestIsImmutable
|