6 Commits

Include renames

Author	SHA1	Message	Date
Jason WoltjeandClaude Fable 5	e11bc66223	fix(wake): #946 digest ack watermark clamped at quarantined seqs — disclose AND clamp ... The embedded ack suggestion covered dead-lettered entries: quarantine is a render-time filter (0.6.14), so `ack.sh consumed --upto <observed_seq>` stepped the cursor past quarantined seqs and _record_last_consumed wrote consumed-hash witness rows for deliveries that never happened (live: mos-dt seq 68 buried under five successive digests; Finding A: a false 9d0f639f…@63 witness row). Fix, per the ruled disposition on #946: - digest.sh: rendered digest gains a QUARANTINED section (seq + class + HELD only — ids and locator values stay withheld, preserving the exclusion property); embedded ack clamped to min(observed_seq, min quarantined seq - 1) with a loud "# ACK CLAMPED (#946)" note; render --from-store syncs the store-owned quarantined.set via `store.sh quarantine-sync` (full replace — a gate fix self-heals stale quarantine); --from-file/--stdin never touch the set. - store.sh: consume REFUSES to cross an unconsumed quarantined seq; `--force-past-quarantine` is the ONLY way past, loud per-seq on stderr, and even the forced path never writes a consumed-hash witness for a quarantined seq; crossed seqs are pruned from the set after the cursor moves. New `quarantine-sync` (stdin seqs, full replace, invalid input is a loud no-op) and `quarantine-audit [--repair]` (sweeps consumed-hashes for rows provably contradicted by the dead-letter ledger; report exits 1; --repair removes only provably-false rows; the ledger is history and never modified; rows whose dead-letter evidence was pruned are unprovable and untouched). - ack.sh: plumbs --force-past-quarantine through to store consume; forced- path loudness is re-emitted on stderr while `CONSUMED <n>` stays clean. Tests: test-wake-store-ack.sh T13-T16 (34 assertions RED at base), test-wake-digest-quarantine.sh Q12-Q16 (10 RED at base; Q13/Q16 green-by-design controls). All nine wake suites green. version=0.6.15. Closes #946 Written-by: pepper (sb-it-1-dt) Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB	2026-07-30 10:10:21 -05:00
jason.woltjeandMos	9e81ffd7fc	fix(wake): #932 stop reconciler re-enumerating already-CONSUMED detector state (#935) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 15:48:40 +00:00
jason.woltjeandMos	9becaf877f	fix(wake): #917 gate the final observed_seq cursor write + observed.set/cursor consistency (defense-in-depth) (#933) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 15:14:38 +00:00
jason.woltjeandMos	13e6ce5e5c	fix(wake): #927 enqueue TOCTOU — move stale-tmp cleanup off the hot enqueue path (no concurrent in-flight-write clobber) (#928) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 10:56:40 +00:00
jason.woltjeandMos	e2ec927b1c	fix(wake): #908 unify observed_seq on a single store-side allocator (dissolve detector-private-counter seam) (#915) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 06:02:02 +00:00
jason.woltjeandMos	28f022d9c0	feat(wake): W2 — three-cursor durable store + RECEIVED/CONSUMED ack-wrapper + watch-list schema (#903) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 23:58:08 +00:00