fix(cluster): close four-node PCM-X liveness campaign - #63

Closed

sqlrush wants to merge 56 commits into

mainfrom

fix/t400-l3-fail-closed-observability

Commits on Jul 18, 2026

feat(cluster): record the PCM-X fail-closed arm per node
SqlRush
committed
6abbf79
test(cluster): sync pinned pcm dump counts for the fail-closed site key
SqlRush
committed
9e6d8b6
fix(cluster): capture the internal convert.c fail-closed arms too
SqlRush
committed
c2b2b41
style(cluster): clang-format the fail-closed observability files
SqlRush
committed
ad47d84
test(cluster): t/400 mid-leg probe of writer wait events and queue gauges
SqlRush
committed
c0955a9
test(cluster): two-sample mid-leg probe to fingerprint the stall loop
SqlRush
committed
69f63a9
test(cluster): mid-leg probe adds aux-process waits and per-peer wire deltas
SqlRush
committed
776af9d
test(cluster): include lmd and interconnect listener in the aux-wait probe
SqlRush
committed
9eec493
feat(cluster): per-slot master tag/ticket diagnostic rows in the pcm dump
SqlRush
committed
5d686d2
fix(cluster): coherent slot dump + requester escape-arm evidence
SqlRush
committed
194f3f7
style(cluster): undo accidental clang-format of PG core bufmgr.c
SqlRush
committed
63f1cb2
fix(cluster): forward-declare pcm_x_domain_slot for the early dump iterators
SqlRush
committed
10cd1f2
feat(cluster): local-tag dump, terminal-kick note, fail-closed exit lines
SqlRush
committed
2daddda

Commits on Jul 19, 2026

fix(cluster): retire cross-lane holder terminal under newer writer REVOKE_BARRIER
SqlRush
committed
623e247
test(cluster): rebuild cross-lane retire test on production paths; tighten exemption to distinct tickets
SqlRush
committed
3a3b97b
fix(cluster): wait out transient BUSY at the PCM-X remote-reservation preflight
SqlRush
committed
efb2ec5
feat(cluster): absorb interleaved-revoke base drift via one-shot INSTALL_READY grant rebase
SqlRush
committed
ecfcd41
fix(cluster): unwind nested-guard BARRIER_CLOSED to the heap caller instead of a client ERROR
SqlRush
committed
03ada81
fix(cluster): inherit the published effective grant base into every same-round writer claim
SqlRush
committed
fbd7f8b
fix(cluster): sample the PCM-X capability family atomically and enforce V2 admission at ingress
SqlRush
committed
e5c7345
test(cluster): execute the preflight BUSY wait arm over the real ownership object
SqlRush
committed
e39bca7
style(cluster): clang-format the review-fix surfaces
SqlRush
committed
e6134eb
fix(cluster): admit the self-loopback V2 INSTALL_READY at ingress
SqlRush
committed
776fdb8
fix(heap): make every barrier-re-entered update/delete decision pass-local
SqlRush
committed
cb7ab02
fix(cluster): wait out a live ownership lifecycle at the legacy grant reservation
SqlRush
committed
d7cac6a
fix(cluster): hand the holder-gate BARRIER_CLOSED refusal to the barrier-aware caller
SqlRush
committed
832019b
fix(cluster): log the refused self-source DRAIN proof before fusing the node
SqlRush
committed
f042473
fix(cluster): count master leg re-arms and log a repeating drive stall
SqlRush
committed
440e963
fix(cluster): log the live descriptor lifecycle behind a repeating REVOKE refusal
SqlRush
committed
6d20a13
fix(cluster): walk every terminal ticket per retry tick, oldest first
SqlRush
committed
089d3ce
fix(cluster): release the self-source DRAIN record on the exact completion certificate
SqlRush
committed
c46f514
fix(cluster): name the retire-collect arm before its shared fail-closed exit
SqlRush
committed
26bf334
fix(cluster): classify the independent dual terminal instead of fusing it
SqlRush
committed
1be1998
fix(cluster): close the frozen round when the independent dual's last lane retires
SqlRush
committed
0d26b44
fix(cluster): let a cancelled next-round member detach under terminal evidence
SqlRush
committed
ad67e65
fix(cluster): deliver the frozen-round promotion through the RETIRE wake batch
SqlRush
committed
c53af5a
fix(cluster): report the diverged descriptor tuple when an exact finish fails
SqlRush
committed
9b651a9
fix(cluster): enumerate the S-holder X upgrade as a legal grant finish shape
SqlRush
committed
f40e54a
Revert "fix(cluster): enumerate the S-holder X upgrade as a legal grant finish shape"
SqlRush
committed
7755173
fix(cluster): re-enter the convert queue when a stale X cover needs a writer re-acquire
SqlRush
committed
ec2c84d
fix(cluster): name the finish target state in the rolled-back grant detail
SqlRush
committed
a149625
fix(cluster): log the begin-time ownership context of a non-N legacy reservation
SqlRush
committed
0804d57

Commits on Jul 20, 2026

fix(cluster): keep the pinned retained PI mirror instead of clearing BM_VALID under a pin
SqlRush
committed
c3b1998
fix(cluster): admit the direct-init IO window in the finish valid-image gate
SqlRush
committed
0d70fa7
fix(cluster): republish a kept-pinned PI mirror at each legacy byte-currency proof
SqlRush
committed
e4e2b98
fix(cluster): name every silent refusal arm of the source-side REVOKE handler
SqlRush
committed
3d058d6
fix(cluster): deny in-flight legacy readers for PCM-X
SqlRush
committed
0994a2a
fix(cluster): count PCM own lifecycle at the exact grant begin and X commit
SqlRush
committed
f78f643
fix(cluster): retry post-handoff COMMIT_X
SqlRush
committed
94fe492
fix(cluster): count exact PCM-X requester waits
SqlRush
committed
e56e2f1
fix(cluster): unwind requester waits on late revoke barriers
SqlRush
committed
3417a62
fix(cluster): reuse stable successor S cover on reverify
SqlRush
committed
3bcf484
fix(cluster): stage pending-X denial replies on DATA owner
SqlRush
committed
e59cc4b
fix(cluster): keep PCM-X retained fallback current
SqlRush
committed
1b2c3c4

Commits on Jul 22, 2026

fix(cluster): close four-node PCM-X liveness campaign
SqlRush
committed
505517f
style(cluster): format PCM-X liveness closure
SqlRush
committed
117a6dc