7 Commits

Include renames

Author	SHA1	Message	Date
Jason WoltjeandClaude Fable 5	667402457e	fix(wake): #942 review — force base-10 on the slack knob; shape validation is not radix validation ... '08'/'09' pass ^[0-9]{1,9}$ yet are fatal octal in $((...)) — the same poll-killing mode this PR closes — and '0300' silently means 192, changing the operator's stated intent with no warning. slack=$((10#$slack)) after the regex (which guarantees pure digits, so 10# is safe) makes zero-padded knobs mean what was written instead of rejecting them. Two new D13 sub-cases: '08' survives with metadata kept, and the discrimination test — '0300' with a ts +250s ahead KEEPS the ts (decimal 300) where octal 192 would have dropped it. Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB	2026-07-30 06:04:48 -05:00
Jason WoltjeandClaude Fable 5	313f3087e6	fix(wake): #941 review §2 round 2 — validate WAKE_SNAPSHOT_TS_FUTURE_SLACK before arithmetic ... The operator's slack knob was interpolated raw into $((...)) under set -u: '300s'/'5m' -> 'value too great', 'abc' -> 'unbound variable' — all FATAL to the poll, falsifying the PR's own 'poll never fails' invariant, and a negative value silently inverted the guard into deny-all. Now resolved once into a local, validated ^[0-9]{1,9}$, loud fallback to 300 on mismatch. New D13 group: '300s'/'abc'/negative all fall back and KEEP valid metadata; a valid tightened knob (0) still rejects a future ts. Manifest states the skew guarantee explicitly: a surviving snapshot_ts is attested only to within SLACK seconds of the DETECTOR's clock — bounded negative age at render is possible; treat age<=0 as effectively-current, never proof of freshness. Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB	2026-07-30 05:57:17 -05:00
mos-dt-0andMos	8710d0f6d7	feat(wake): #940 snapshot-datable digests — fd-3 snapshot-metadata channel (#941) ... Adapter emits snapshot sha/ts out-of-band on fd 3 so a changing value never enters the delta-gate hash. Detector validates advisorily (sha regex, epoch sanity before arithmetic, future-skew slack); malformed metadata is dropped loudly and never gates the wake. Digest renders snapshot_sha/snapshot_ts plus a git-show re-verify hint. Adapters that never write fd 3 are byte-identical. Reviewed-by: Mos (design, independent) Reviewed-by: mos-dt (artifact, hardening §2) Co-authored-by: mos-dt-0 <[email protected]>	2026-07-30 10:55:18 +00:00
jason.woltjeandMos	13e6ce5e5c	fix(wake): #927 enqueue TOCTOU — move stale-tmp cleanup off the hot enqueue path (no concurrent in-flight-write clobber) (#928) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 10:56:40 +00:00
jason.woltjeandMos	e2ec927b1c	fix(wake): #908 unify observed_seq on a single store-side allocator (dissolve detector-private-counter seam) (#915) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 06:02:02 +00:00
jason.woltjeandMos	003cdaa1a6	feat(wake): W6 — off-host dead-man beacon + pluggable alarm-sink adapter (#910) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 02:30:28 +00:00
jason.woltjeandMos	5df47e735e	feat(wake): W4 — per-host delta-gated detector daemon (fail-loud source semantics, enqueues to W2 store) (#907) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 01:04:55 +00:00