Skip to content

execution: select restore consumers while preserving checkpoint provenance - #767

Open
zibi-pplx wants to merge 1 commit into
codex/persist-cold-boot-consumersfrom
codex/compatible-restore-consumers
Open

zibi-pplx wants to merge 1 commit into
codex/persist-cold-boot-consumersfrom
codex/compatible-restore-consumers

Conversation

@zibi-pplx

@zibi-pplx zibi-pplx commented Oct 21, 2026 •

Copy link
Copy Markdown
Collaborator

Restore prefers the snapshot producer when allowed and usable, then selects a qualified compatible loader without requiring boot-kernel files or rewriting the snapshot manifest. Save the exact consumer before effects and resolve each new attempt from immutable producer evidence. Exact requests never silently upgrade, and adding an allowed environment does not change a usable source.

Document policy defaults, cohort rollout constraints, independent policy freshness and the difference between revocation and lifecycle retirement. A failed restore can leave a consumer recorded for a later exact stop/start. Resident-VM incident handling and incompatible upgrades are separate work: preserve matching disk/checkpoint rollback data and require explicit memory-loss consent; retention never permits a revoked runtime.

Validation: affected libraries compiled offline on the updated stack; focused policy, cold-selection and restore tests passed. Restore and protocol regressions are included; database integration, full tests and KVM validation remain with CI.

@zibi-pplx
zibi-pplx added this pull request to stack #768 October 21, 2026 07:56
@zibi-pplx
zibi-pplx force-pushed the codex/compatible-restore-consumers branch from 5b6835b to b24a8ec Compare October 21, 2026 13:40
@zibi-pplx zibi-pplx changed the title execution: select restore loaders without rewriting snapshot provenance execution: select restore consumers while preserving checkpoint provenance Oct 21, 2026
@zibi-pplx
zibi-pplx removed this pull request from stack #768 October 21, 2026 13:44
@zibi-pplx
zibi-pplx added this pull request to stack #779 October 21, 2026 13:45
@zibi-pplx
zibi-pplx force-pushed the codex/compatible-restore-consumers branch from b24a8ec to d4872f5 Compare October 21, 2026 13:51
…nance

Restore prefers the snapshot producer when allowed and usable, then selects a qualified compatible loader without requiring boot-kernel files or rewriting the snapshot manifest. Save the exact consumer before effects and resolve each new attempt from immutable producer evidence. Exact requests never silently upgrade, and adding an allowed environment does not change a usable source.

Document policy defaults, cohort rollout constraints, independent policy freshness and the difference between revocation and lifecycle retirement. A failed restore can leave a consumer recorded for a later exact stop/start. Resident-VM incident handling and incompatible upgrades are separate work: preserve matching disk/checkpoint rollback data and require explicit memory-loss consent; retention never permits a revoked runtime.

Validation: affected libraries compiled offline on the updated stack; focused policy, cold-selection and restore tests passed. Restore and protocol regressions are included; database integration, full tests and KVM validation remain with CI.
@zibi-pplx
zibi-pplx force-pushed the codex/compatible-restore-consumers branch from d4872f5 to 92481ec Compare October 21, 2026 13:52

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant