feat!: establish runtime ownership and durable application history - #28

Merged

GCdePaula merged 32 commits into

mainfrom

feature/review-ledger-and-tracks

Sep 11, 2026

Commits on Sep 10, 2026

feat!: authority-boundary runtime, fact-derived admission, durable history foundation
GCdePaula
committed
9c67337
docs: distill the corpus — living docs timeless, history in the register
GCdePaula
committed
f6e5f1f
fix(egress): make the WS feed's I11 filter unconstructible-to-violate
GCdePaula
committed
f391d1d
refactor(run)!: consume config in prepare; one drain loop; collapse the launch bracket
GCdePaula
committed
c2658b0
feat(l1): redact the submitter key at the process edge (SubmitterKey)
GCdePaula
committed
d94007a
fix(runtime): simplify fee oracle lifecycle and close review gaps
GCdePaula
committed
40a2235
test(recovery): align E2E clock models
GCdePaula
committed
d400b37
docs(review): record the 2026-09-03 branch stock-take
GCdePaula
committed
f680286
fix(ci): stop styling logs off-TTY; assert the danger exit class, not the log line
GCdePaula
committed
37c47ce
docs: make the runtime prose match what the types enforce
GCdePaula
committed
50dea58
docs: finish the review-codename sweep
GCdePaula
committed
4e14c16
chore(storage): gate the remaining test-only surface
GCdePaula
committed
410bf0b
fix(recovery): log the flush's finality-wait retry as a warning
GCdePaula
committed
f126a0e
docs(fee): say what fixed_mul's truncation relies on
GCdePaula
committed
e523247
fix(ingress): keep the application's error detail out of the /tx 500 body
GCdePaula
committed
d7ccb61
refactor(app): drop the panicking ApplicationProgress constructor
GCdePaula
committed
d5fda15
docs(review): record wave 1 of the stock-take follow-ups
GCdePaula
committed
6e15c7a
refactor(runtime): containment writes nothing durable; the bracket writes the black box once
GCdePaula
committed
c3b1d3d
refactor(storage): the finalized lease carries its inclusion block non-optionally
GCdePaula
committed
a48b448
fix(recovery): the EnsureOpenTip phase names its causes and enforces its postcondition
GCdePaula
committed
04edd25
refactor(runtime): workers that only need to stop take the notification half
GCdePaula
committed
b61874d
fix(commands): classify the key file by kind and give every recovery failure one verdict
GCdePaula
committed
fc1d2d6
test(commands): table-drive the exit-code contract and pin two wire values
GCdePaula
committed
6082488
docs(review): record wave 3 of the stock-take follow-ups
GCdePaula
committed
807d34d
docs: consolidate architecture documentation and review history
GCdePaula
committed
9545017
refactor(storage): remove duplicate execution-offset validation
GCdePaula
committed
a0c15f9
fix(l1): join in-flight reader appends during shutdown
GCdePaula
committed
191a76f
refactor(recovery): express startup recovery as an ordered procedure
GCdePaula
committed
1ceb6a6
refactor(runtime)!: abort diagnosed terminal faults without draining
GCdePaula
committed
9451f61
refactor(application)!: simplify progress ownership and checkpoint creation
GCdePaula
committed
129da29
fix: align ingress CORS and Lua tooling with DEX integration
GCdePaula
committed
a2a2d45
docs: clarify application failure semantics and superseded review notes
GCdePaula
committed
ef5f640