feat: prototype allocator-level OOM protection (OomGuard breaker + cooperative real-usage accounting) - #4582

Closed

andygrove wants to merge 28 commits into

apache:mainfrom

andygrove:oom-guard-circuit-breaker

Commits on Jun 3, 2026

feat: add oom-guard feature and accounting helpers
andygrove
committed
2c0bd23
refactor: feature-gate oom_guard module and harden should_trip
andygrove
committed
d5f1355
feat: oom-guard process globals, arming, and enforcement
andygrove
committed
97d9124
feat: wrap global allocator with AccountingAllocator under oom-guard
andygrove
committed
470c981
docs: document oom-guard allocator reentrancy and cast safety
andygrove
committed
2439345
feat: stamp query-worker threads and arm oom-guard from config
andygrove
committed
32c47be
refactor: name memoryGuard config keys and warn on zero limit
andygrove
committed
1b06d94
feat: map OomGuardPanic to ResourcesExhausted at JNI boundaries
andygrove
committed
2ed112e
refactor: share oom-guard error message and harden panic recovery
andygrove
committed
f2be0c0
feat: register spark.comet.exec.memoryGuard configs
andygrove
committed
6669c21
docs: clarify memoryGuard config descriptions
andygrove
committed
0a7d686
test: oom-guard trips on a real over-budget allocation
andygrove
committed
ffb52f2
fix: map OomGuardPanic on the spawned-path consumer thread
andygrove
committed
adef2b2
refactor: consolidate oom-guard panic mapping and simplify allocator cfg
andygrove
committed
89c782d
fix: avoid realloc use-after-free and serialize guard panics in OomGuard [skip ci]
andygrove
committed
423cfce

Commits on Jun 20, 2026