Recover interrupted store migrations with production crash evidence - #138

Merged

flyingrobots merged 29 commits into

mainfrom

feat/108-migration-recovery

Oct 2, 2026

Commits on Oct 1, 2026

feat: recover interrupted store migrations (refs #108)
flyingrobots
committed
c2414bf
Fix: retain observed migration prefix and intent in recovery receipts
flyingrobots
committed
1f26200
Fix: verify migration stage and canonical inode pairs before resumption
flyingrobots
committed
06df8f7
Fix: report receipt-only migration effects precisely
flyingrobots
committed
a478a2a
Fix: revalidate current migration authority before recovery admission
flyingrobots
committed
529b4c6
Docs: point migration and reader recovery gaps at open owners
flyingrobots
committed
f97df51
Fix: confine migration resumption to admitted recovery (refs #108)
flyingrobots
committed
b46e70a
Fix: refuse non-regular migration residue before opening it (refs #108)
flyingrobots
committed
fce0553
Fix: identify receipt residue before incomplete namespaces precisely (refs #108)
flyingrobots
committed
71fbe04
Docs: distinguish migration recovery from pending retention recovery (refs #108)
flyingrobots
committed
e82877d
Fix: admit only protocol-bounded migration crash occurrences (refs #108)
flyingrobots
committed
cc620b8
Fix: propagate migration restart model coordinate failures (refs #108)
flyingrobots
committed
837b5f4
Docs: state the transition ledger construction and verification boundary (refs #108)
flyingrobots
committed
906450b
Fix: enforce canonical migration ledger fields with mutation laws (refs #108)
flyingrobots
committed
3b80fa2
Fix: derive migration namespace completeness from its canonical names (refs #108)
flyingrobots
committed
794d472
Docs: reconcile migration recovery status with its executable evidence (refs #108)
flyingrobots
committed
3c57fe4
Docs: state recovery table admission and receipt evidence conditions (refs #108)
flyingrobots
committed
f1c89ea
Test: pin checksum causes through migration recovery refusals (refs #108)
flyingrobots
committed
a58f237
Docs: distinguish migration and retention incomplete-stage discard boundaries (refs #108)
flyingrobots
committed
ca6f9fd
Docs: distinguish current authority from persisted restart intent (refs #108)
flyingrobots
committed
632c694
Docs: require exact NUL-terminated fixture hash domains (refs #108)
flyingrobots
committed
7f10670
Docs: name executable migration evidence and open gap owners (refs #108)
flyingrobots
committed
eca128c
Fix: derive interrupted migration writes from canonical record widths (refs #108)
flyingrobots
committed
c44caef
Fix: prove migration stage interruption bounds without integer division (refs #108)
flyingrobots
committed
abbfe30

Navigation Menu

Recover interrupted store migrations with production crash evidence - #138

Recover interrupted store migrations with production crash evidence#138
flyingrobots merged 29 commits into
mainfrom
feat/108-migration-recovery

Commits on Oct 1, 2026

feat: recover interrupted store migrations (refs #108)

Fix: retain observed migration prefix and intent in recovery receipts

Fix: verify migration stage and canonical inode pairs before resumption

Fix: report receipt-only migration effects precisely

Fix: revalidate current migration authority before recovery admission

Docs: point migration and reader recovery gaps at open owners

Fix: confine migration resumption to admitted recovery (refs #108)

Fix: refuse non-regular migration residue before opening it (refs #108)

Fix: identify receipt residue before incomplete namespaces precisely (refs #108)

Docs: distinguish migration recovery from pending retention recovery (refs #108)

Fix: admit only protocol-bounded migration crash occurrences (refs #108)

Fix: propagate migration restart model coordinate failures (refs #108)

Docs: state the transition ledger construction and verification boundary (refs #108)

Fix: enforce canonical migration ledger fields with mutation laws (refs #108)

Fix: derive migration namespace completeness from its canonical names (refs #108)

Docs: reconcile migration recovery status with its executable evidence (refs #108)

Docs: state recovery table admission and receipt evidence conditions (refs #108)

Test: pin checksum causes through migration recovery refusals (refs #108)

Docs: distinguish migration and retention incomplete-stage discard boundaries (refs #108)

Docs: distinguish current authority from persisted restart intent (refs #108)

Docs: require exact NUL-terminated fixture hash domains (refs #108)

Docs: name executable migration evidence and open gap owners (refs #108)

Fix: derive interrupted migration writes from canonical record widths (refs #108)

Fix: prove migration stage interruption bounds without integer division (refs #108)

Commits on Oct 2, 2026

Docs: qualify persisted intent in the recovery summary (refs #108)

Test: cover every partial canonical namespace extent (refs #108)

Test: assert only the consequential interruption bounds (refs #108)

Test: derive case ranges while retaining the frozen directory-count law (refs #108)

Merge restart-coordinate policy and validated main into migration recovery (#108)