Design: storage location and Asset storage backends (#311) - #313

Merged

Fooftilly merged 49 commits into

claude/kind-hypatia-psyqdp

Sep 30, 2026

Commits on Sep 29, 2026

Add storage location and backend architecture design (#311)
claude
committed
039f7d9
Tighten storage design per review: relocation binding, root ID, defaults
claude
committed
c9a1488
Fence the relocation source so no other process can bind it (#311)
claude
committed
eb0f823
Make the P2 fence the relocation revocation; narrow V11 and legacy probes
claude
committed
3b863f4
Clear the destination relocation role in the P6 activation write (#311)
claude
committed
c946f42
Align the relocation diagram with the P6 release boundary (#311)
claude
committed
5aa37fa
Tighten relocation: P6 lease order, inbox final pass, Docker moves, S3 replace (#311)
claude
committed
b8fcf18
Spell out revert after a successful P6(a) (#311)
claude
committed
c8d784a
Hold the destination lease through revert; make the lease a non-expiring OS lock (#311)
claude
committed
dd23e1c
Lift a leftover source fence in failed-phase recovery (#311)
claude
committed
8594a56
Revert binds the source only after config rollback and unfence (#311)
claude
committed
25d231d
Keep the destination lease when P6(a) fails (#311)
claude
committed
7b0e957
Offline finalize/abort advance the bootstrap relocation record (#311)
claude
committed
93853cc
Offline abort refuses once the destination is active (#311)
claude
committed
cec74ee
Keep the offline relocation journal on the volume markers (#311)
claude
committed
6d7569a
Fix the P6 table row split by blank lines (#311)
claude
committed
0d42f68
Align commit-point wording, marker phase schema and offline P7 retry (#311)
claude
committed
0a4e863
Make offline abort terminal: finalize refuses an aborted destination (#311)
claude
committed
f7f3db4
Dispatch startup recovery by root source; P6 accepts either committed proof (#311)
claude
committed
e5f142e
Carry the source pointer through the offline commit; moved_from is operational for P7 (#311)
claude
committed
d7c03de
Align the whole-move guarantee and in-app P6(b) with committed proof and moved_from (#311)
claude
committed
c24d7ae
Start the no-bindable-root window at the P2 fence (#311)
claude
committed
0b387d1
Serialize marker writes under the root lock; define unbind and the offline P1-P4 journal (#311)
claude
committed
7471d7b
Offline finalize/abort lock both roots before validating (#311)
claude
committed
cb2b8a8
Offline relocate holds both root locks for the whole P0-P4 run (#311)
claude
committed
b1232c2
Let offline finalize proceed under the destination lock when the source is unreachable (#311)
claude
committed
942d410
Require destination-side proof of the P2 fence for dest-only finalize (#311)
claude
committed
8ef5f44
Make relocation P1 crash-recoverable (#311)
claude
committed
5490fa0
Define P1's owned file set and use it in both P1-only recovery checks (#311)
claude
committed
3611917
Make preflight probes self-cleaning and let P0 resume the same move (#311)
claude
committed
852a88a
Offline relocate takes both locks before any P1 state (#311)
claude
committed
3cb0931
Give the preflight scaffold two probe subdirectories for V6 (#311)
claude
committed
9e9cd7a
V3 accepts this move's staging destination on a same-move resume (#311)
claude
committed
9c6885e
Accept and clean an emptied .prks-maintenance/ as preflight scaffold (#311)
claude
committed
948db61
Admit the in-app move in backup mode at request admission (#311)
claude
committed
c51cf4b
Add an exclusive rebind barrier to the move scope for P6 (#311)
claude
committed
ff982fd
Guard every bootstrap config write with a locked compare-and-set (#311)
claude
committed
9f3e92b
Guard hot rebinds, reconcile inbox deletions, persist normalized root (#311)
claude
committed
dbec6e2
Hold the config lock across hot rebind; require content proof for the inbox pass (#311)
claude
committed
9c090f6
Require verified before any phase-absent offline finalize (#311)
claude
committed
082a09b
Prove inbox pathname identity after hashing in the final pass (#311)
claude
committed
af34f8e
Allow abort rerun after unfence; keep P1-only source bindable (#311)
claude
committed
ed077c1
Keep P10 explicit, add ctime and residual inbox rule, abort --to, Windows lock order (#311)
claude
committed
cb5ff85
Keep existing root IDs on open; Windows-safe P10 lock order (#311)
claude
committed
ad7a3ca
Move the open-existing-library ID test to Phase D (#311)
claude
committed
4834a23
Define one terminal teardown procedure in §12 for all root removals (#311)
claude
committed
eb95662
Keep the retired marker and config record while P10 has kept inbox files (#311)
claude
committed
f482bc7

Commits on Sep 30, 2026