windows-ioring-sys: durability, a seeded response-space resolver, and the delivery-stall fix (M20-M26) - #108

Merged

MikeGrier merged 98 commits into

mainfrom

mikegrier/morechanges

Sep 25, 2026

Commits on Sep 20, 2026

docs(ioring): queue the epoch-log review findings as M21 through M23

Mike Grier
and
Copilot
committed
0b429ea
docs: record the M20.1 / M20.3 coupling to SH-4.12 in both checklists

Mike Grier
and
Copilot
committed
702715a
docs(ioring): correct the file-handle NUMA mechanism in "What is not reachable"

Mike Grier
and
Copilot
committed
14d5e4d
docs(ioring): record the ARM no-L3 measurement as D-48

Mike Grier
and
Copilot
committed
44e36ef
docs(ioring): remove the status claim from the notes and the rustdoc

Mike Grier
and
Copilot
committed
338b6ff
docs: add CONTRACT INTEGRITY rule 6 -- never store a fact another artifact owns

Mike Grier
and
Copilot
committed
38d0527

Commits on Sep 21, 2026

docs(ioring): justify the epoch-order assertion by the half of D-24 that survived

Mike Grier
and
Copilot
committed
fa5e9a7
feat(ioring): add a bounded pop, generic over the wait the caller supplies

Mike Grier
and
Copilot
committed
c6703f3
refactor(ioring): make the epoch trigger a value each match arm must produce

Mike Grier
and
Copilot
committed
48be30c
test(ioring): bind what a failed commit means for durable_through

Mike Grier
and
Copilot
committed
7cde484
docs(ioring): record what remediating the epoch-log review has taught so far

Mike Grier
and
Copilot
committed
53ae977
fix(ioring): bound every wait that could hang, not the two that were named

Mike Grier
and
Copilot
committed
665edab

Commits on Sep 22, 2026

fix(ioring): an expired wait is a result, not an error

Mike Grier
and
Copilot
committed
9c9c5ff
chore: teach the borrow-surface check the two shapes it could not see

Mike Grier
and
Copilot
committed
0cda73b
docs(ioring): record an unreproduced bounded_pop failure and queue its fix

Mike Grier
and
Copilot
committed
6dfcbcc
fix(ioring): make bounded_pop wait on a pipe, not on a fast enough device

Mike Grier
and
Copilot
committed
8f079ca
test(ioring): assert the mechanism, not the clock

Mike Grier
and
Copilot
committed
badfe57
docs(ioring): write up hermetic unit tests without losing unit-level coverage

Mike Grier
and
Copilot
committed
621a022
docs(ioring): record the non-hermetic unit suite as a defect, and schedule M24

Mike Grier
and
Copilot
committed
6fe586c
docs(ioring): correct M24's sequencing rationale -- waiting does not compound

Mike Grier
and
Copilot
committed
ef87310
docs: extend CONTRACT INTEGRITY rule 6 to characterisations of sibling items

Mike Grier
and
Copilot
committed
1d01997
docs: park the principles-vs-triggers coverage idea, with the objection to it

Mike Grier
and
Copilot
committed
40beb1b
docs: record the feasibility point as a concern, not an objection

Mike Grier
and
Copilot
committed
6cba288
perf(ioring): batch an epoch's appends into one submission, and measure the claim

Mike Grier
and
Copilot
committed
7c12708
fix(ioring): derive the epoch-log sample's free slots instead of tracking them

Mike Grier
and
Copilot
committed
834c7af
feat(ioring): provide NumaBuffer, and place the epoch-log arena deliberately

Mike Grier
and
Copilot
committed
896252e
docs(ioring): re-plan M22+.2 as M23.3, because it justified itself with the wrong evidence

Mike Grier
and
Copilot
committed
7bda668
docs(ioring): investigate M20.6 -- the benchmark measures deferral, not commits

Mike Grier
and
Copilot
committed
4600a64

Commits on Sep 23, 2026

test(ioring): cover ring_copy's degraded-fallback path, both directions

Mike Grier
and
Copilot
committed
8b8afaf
fix(ioring)!: ask which cache level partitions the machine, never filter on L3

Mike Grier
and
Copilot
committed
3433fe0
docs(ioring): answer M24.1 -- the fake was the wrong instrument; queue M26

Mike Grier
and
Copilot
committed
2f597d4
refactor(ioring): split the ring's bookkeeping out of the ring

Mike Grier
and
Copilot
committed
785211d
test(ioring): mint tokens from the ledger, so token's tests open no ring

Mike Grier
and
Copilot
committed
9bc0350
test(ioring): relocate the ring-opening lib tests that use only public API

Mike Grier
and
Copilot
committed
e15ab83
ci(ioring): inventory the lib tests that open a ring, so the count cannot climb back

Mike Grier
and
Copilot
committed
a4f2f25
docs(ioring): sweep what M24 made false -- and what it did not

Mike Grier
and
Copilot
committed
a76fb63
docs(ioring): stop the epoch-log sample claiming to measure a commit

Mike Grier
and
Copilot
committed
740e40d
docs(ioring): keep options open; foreclose only on analytic grounds

Mike Grier
and
Copilot
committed
26fad15
docs: record the adoption thesis behind the ring, queue and locality work

Mike Grier
and
Copilot
committed
0ba7167
docs(topology-planner): settle the goal as a dataflow description; two stages, plural answer

Mike Grier
and
Copilot
committed
d3c84ea
docs: record the resolution gradient, and correct a deferral written up backwards

Mike Grier
and
Copilot
committed
169195f
docs(ioring): say why placement.rs calls DeviceIoControl directly

Mike Grier
and
Copilot
committed
cbd5ce6
feat(ioring): state that the ring, not the log, is the durability unit

Mike Grier
and
Copilot
committed
d845bb2
fix(ioring): separate the barrier's scope from the flush's in the contract

Mike Grier
and
Copilot
committed
4adea67
docs(ioring): right-size the device question in the epoch-log contract

Mike Grier
and
Copilot
committed
48dc99d
docs: record the co-flush musing, and question whether M23.2(b) is at this level

Mike Grier
and
Copilot
committed
b20d1e0
feat(ioring): D-54 -- this crate owns one flush, not durability groups

Mike Grier
and
Copilot
committed
4319688
docs: keep the concept as flush equivalence, not device identity

Mike Grier
and
Copilot
committed
0c245de
docs(ioring): archive M23.1 with a stub, per the move-with-link rule

Mike Grier
and
Copilot
committed
29ea07e
docs: new crates take the win- prefix; queue the migration at the horizon

Mike Grier
and
Copilot
committed
6101ca6
feat!: create win-numa-sys and move NumaBuffer into it

Mike Grier
and
Copilot
committed
947b252
docs(numa): record N-D-1 -- both ways to a node, and no shortcut between them

Mike Grier
and
Copilot
committed
740d786

Commits on Sep 24, 2026

feat(ioring): spike Pending<T, X> for M23.3, and report what it cannot do

Mike Grier
and
Copilot
committed
bc856bd
test(ioring): reach the failed-write path, and make the M22.2 regression catchable

Mike Grier
and
Copilot
committed
448709b
docs(ioring): correct the type-erasure claim, and record the M23.3 exploration

Mike Grier
and
Copilot
committed
783a94c
docs(ioring): reframe M23.3 on its mechanism rather than its duplication count

Mike Grier
and
Copilot
committed
b4d17f7
feat(ioring)!: D-55 -- the ring owns the pending inventory

Mike Grier
and
Copilot
committed
fdc3f7f
fix(ioring): keep Drop guards silent while already panicking

Mike Grier
and
Copilot
committed
74022a3
test(ioring): cover both of IoRing::drop's asserts without a seam

Mike Grier
and
Copilot
committed
75b3ef7
feat(ioring): give epoch-log records a sector stride, both ends

Mike Grier
and
Copilot
committed
a8a2a3e
feat(ioring): open the epoch log NO_BUFFERING | OVERLAPPED over a written extent

Mike Grier
and
Copilot
committed
e75a9d7
docs(ioring): call the pre-allocation step a zero-fill, and say it is moved not avoided

Mike Grier
and
Copilot
committed
e44fa97
docs(ioring): measure what set_len costs instead of asserting it

Mike Grier
and
Copilot
committed
54cf1c6
docs(ioring): measure the deliberate-forcing trick, and bound the fill's memory

Mike Grier
and
Copilot
committed
7bb7cc1
docs(ioring): measure what the pre-allocation costs at this sample's real sizes

Mike Grier
and
Copilot
committed
e9b086a
perf(ioring): size the zero-fill chunk from measurement, not habit

Mike Grier
and
Copilot
committed
c7bf651
docs(ioring): record why the zero buffer is allocated and not a static

Mike Grier
and
Copilot
committed
bc86ea6
test(ioring): run the epoch-log sample's own verification, and main under CI

Mike Grier
and
Copilot
committed
e1c65cc
feat(ioring): measure a commit as submit / blocking / deferral

Mike Grier
and
Copilot
committed
2b2e75c
fix(ioring): count a strategy's preparation as part of its commit, and re-run M20.6

Mike Grier
and
Copilot
committed
6c012e6
docs(ioring): sweep what M25 made false, and record D-56 and D-57

Mike Grier
and
Copilot
committed
d8c90f6
docs(ioring): report the comparison, not the verdict, in the M25 captures

Mike Grier
and
Copilot
committed
fc9f48e
refactor(ioring): keep replay's slice for a stated reason, digest the comparison

Mike Grier
and
Copilot
committed
2d62cbe
docs(ioring): specify the permitted kernel response space as D-59

Mike Grier
and
Copilot
committed
c200174

Commits on Sep 25, 2026

feat(ioring): route the submission-path kernel calls through a seam

Mike Grier
and
Copilot
committed
73b60c9
feat(ioring): build the seeded resolver over the kernel response space

Mike Grier
and
Copilot
committed
6e53bbe
test(ioring): state the properties that must hold under every resolution

Mike Grier
and
Copilot
committed
ac177da
test(ioring): calibrate the resolver against two defects that really happened

Mike Grier
and
Copilot
committed
ce747ce
test(ioring): raise the standard seeded-sweep size to 2048

Mike Grier
and
Copilot
committed
b518a94
test(ioring): give the kernel tests their conformance job and enforce it

Mike Grier
and
Copilot
committed
b0fd225
test(ioring): restate 31 frozen observations as this crate's contract

Mike Grier
and
Copilot
committed
d4ecf8d
feat(ioring): hand rundown's retry policy to the caller, and fix an expired wait reported as a failed submit

Mike Grier
and
Copilot
committed
2585180
test(ioring): make the event-delivery stall report a diagnosis, not a word

Mike Grier
and
Copilot
committed
382efe6
docs(ioring): narrow the event-delivery flake to a minimal reproducer

Mike Grier
and
Copilot
committed
0444768
feat(threadpool): add a trace for defects that only appear under concurrency

Mike Grier
and
Copilot
committed
2522bbf
feat(ioring): trace the delivery path, and prove the pool is alive when it stalls

Mike Grier
and
Copilot
committed
ef3ada4
docs(threadpool): state the arm-before-signal rule on arm and rearm

Mike Grier
and
Copilot
committed
dedbc19
fix(ioring): arm the delivery wait before signalling the completion event

Mike Grier
and
Copilot
committed
6d6956d
feat(ioring): decide RS-P-8, a completion may report fewer bytes than requested

Mike Grier
and
Copilot
committed
f4d4f0e
docs(ioring): record how M26.11 will determine a handle type

Mike Grier
and
Copilot
committed
9c01eb9
docs(ioring): withdraw an unsupported claim in M26.11 and reframe the gate

Mike Grier
and
Copilot
committed
1275443
docs(ioring): decide against a handle pre-check for the epoch log (D-70)

Mike Grier
and
Copilot
committed
eb2f15b
feat(ioring): state the epoch log's handle requirements and enforce the checkable one

Mike Grier
and
Copilot
committed
1b975af
chore: bootstrap win-numa-sys in the release-please manifest

Mike Grier
and
Copilot
committed
29a6ebd
chore: register win-numa-sys in the publish workflow

Mike Grier
and
Copilot
committed
3fbb0a5
fix(ioring): resolve the intra-doc links this branch broke

Mike Grier
and
Copilot
committed
02bb88f
fix(ioring): address PR #108 review, and record what one finding uncovered

Mike Grier
and
Copilot
committed
04c329b
fix(ioring): address the two findings Copilot raised without a thread

Mike Grier
and
Copilot
committed
95fc3e3