Skip to content

E3.1.2: Bind fresh replacement and lifecycle handoff - #315

Open
omry wants to merge 1 commit into
pr314from
pr315
Open

omry wants to merge 1 commit into
pr314from
pr315

Conversation

@omry

@omry omry commented Oct 31, 2026 •

Copy link
Copy Markdown
Owner

Retire the exact previous mapped workload before reloading current admission facts and constructing a fresh native replacement. Reuse the existing lifecycle record and owned waiter for trusted startup and qualified persistent handoff.

Fence transfer claims, detachment and final lifecycle promotion against owner loss. Preserve public mapped inhibition and require future production F/G evidence. Tests cover both profiles, stale bindings, retirement, startup, transfer uncertainty and owner-loss refusals.


Retire the exact previous mapped workload before reloading current admission facts and constructing a fresh native replacement. Reuse the existing lifecycle record and owned waiter for trusted startup and qualified persistent handoff.

Fence transfer claims, detachment and final lifecycle promotion against owner loss. Preserve public mapped inhibition and require future production F/G evidence. Tests cover both profiles, stale bindings, retirement, startup, transfer uncertainty and owner-loss refusals.
@omry
omry changed the base branch from main to pr314 October 31, 2026 12:16
@omry
omry added this pull request to stack #308 October 31, 2026 12:16
@gitar-bot

gitar-bot Bot commented Oct 31, 2026 •

Copy link
Copy Markdown
Code Review ✅ Approved

🟡 Medium risk · Retiring the mapped workload before fresh admission could leave it stopped if replacement admission or startup cannot complete.

Retires the exact previous mapped workload before reloading admission facts and constructing a fresh native replacement, reusing the existing lifecycle record and owned waiter for trusted startup and persistent handoff. No issues found.

Verification

Rules No rules evaluated

Functional validation Not enabled

Set up

For more verification details, comment gitar display:verbose.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source

@omry

omry commented Oct 31, 2026 •

Copy link
Copy Markdown
Owner Author

PR-cycle state — maintained automatically. Do not edit by hand.

Mechanical PR-cycle state (JSON)
{
  "approval": {
    "candidate_revision_fingerprint": "sha256:aa833052b7c061fb183fdf07cefc6f3fe1004a10c0e5593bd2e9e5a3d2e5d41f",
    "evidence": {
      "attestations": [],
      "candidate_revision_fingerprint": "sha256:aa833052b7c061fb183fdf07cefc6f3fe1004a10c0e5593bd2e9e5a3d2e5d41f",
      "check_conclusions": [
        {
          "conclusion": "SUCCESS",
          "name": "Bash native evidence checks",
          "run_id": 124538856708
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124534811379
        },
        {
          "conclusion": "SUCCESS",
          "name": "Linux CI checks",
          "run_id": 124534808808
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-amd64)",
          "run_id": 124534808889
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-arm64)",
          "run_id": 124534808997
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-amd64)",
          "run_id": 124534808982
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-arm64)",
          "run_id": 124534808915
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-amd64)",
          "run_id": 124534808923
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-arm64)",
          "run_id": 124534808959
        }
      ],
      "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "finding_dispositions_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
      "operation_identity": "sha256:c87434b6f342451719b3533efe9962811e2cdfc9a22d33ea4faf7736ebebbdcf",
      "review_request": {
        "body_digest": "sha256:9d6b6b8860c4767c312d0e58df41d5d5a8684ee014676c6ffa920ec758413128",
        "id": 6543348162
      },
      "review_result": {
        "body_digest": "sha256:7f0db021444d4a1e375969895d348ea10695751b68be3d32c77de5d8071cde0b",
        "id": 6543359102
      }
    },
    "evidence_fingerprint": "sha256:59178db26a372c852d9a11e4afae1da624b22ddd97a32a4d5e63129d402df143",
    "head_sha": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
    "operation_identity": "sha256:c87434b6f342451719b3533efe9962811e2cdfc9a22d33ea4faf7736ebebbdcf",
    "review_request_id": 6543348162,
    "review_result_id": 6543359102,
    "status": "approved-evidence-recorded"
  },
  "candidate_revision_fingerprint": "sha256:aa833052b7c061fb183fdf07cefc6f3fe1004a10c0e5593bd2e9e5a3d2e5d41f",
  "check_conclusions": [
    {
      "conclusion": "SUCCESS",
      "name": "Bash native evidence checks",
      "run_id": 124538856708
    },
    {
      "conclusion": "SUCCESS",
      "name": "Gitar",
      "run_id": 124534811379
    },
    {
      "conclusion": "SUCCESS",
      "name": "Linux CI checks",
      "run_id": 124534808808
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (darwin-amd64)",
      "run_id": 124534808889
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (darwin-arm64)",
      "run_id": 124534808997
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (linux-amd64)",
      "run_id": 124534808982
    },
    {
      "conclusion": "SUCCESS",
      "name": "Target smoke (linux-arm64)",
      "run_id": 124534808915
    },
    {
      "conclusion": "SUCCESS",
      "name": "Windows host smoke (windows-amd64)",
      "run_id": 124534808923
    },
    {
      "conclusion": "SUCCESS",
      "name": "Windows host smoke (windows-arm64)",
      "run_id": 124534808959
    }
  ],
  "check_observations": [
    {
      "checks": [
        {
          "conclusion": "SUCCESS",
          "name": "Bash native evidence checks",
          "run_id": 124538856708,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124538856708"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Gitar",
          "run_id": 124534811379,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/runs/124534811379"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Linux CI checks",
          "run_id": 124534808808,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808808"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-amd64)",
          "run_id": 124534808889,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808889"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (darwin-arm64)",
          "run_id": 124534808997,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808997"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-amd64)",
          "run_id": 124534808982,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808982"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Target smoke (linux-arm64)",
          "run_id": 124534808915,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808915"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-amd64)",
          "run_id": 124534808923,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808923"
        },
        {
          "conclusion": "SUCCESS",
          "name": "Windows host smoke (windows-arm64)",
          "run_id": 124534808959,
          "run_status": "completed",
          "status": "success",
          "url": "https://github.com/omry/reploy/actions/runs/41200369978/job/124534808959"
        }
      ],
      "head_sha": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
      "id": "sha256:747559c3bde3ca8a1da4f606809530d02c69dc332bf644e41057e4101410a80c",
      "required_checks": [
        "Bash native evidence checks",
        "Gitar",
        "Linux CI checks",
        "Target smoke (darwin-amd64)",
        "Target smoke (darwin-arm64)",
        "Target smoke (linux-amd64)",
        "Target smoke (linux-arm64)",
        "Windows host smoke (windows-amd64)",
        "Windows host smoke (windows-arm64)"
      ],
      "status": "success"
    }
  ],
  "delivery_deferral_ledger_digest": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945",
  "delivery_deferrals": [],
  "findings": [],
  "pr": {
    "base_ref": "pr314",
    "base_sha": "4f5c1610a88d9a54c90a0a0eee8d8e3a53fbd2c0",
    "body_digest": "sha256:7eb44b7aa010cdbef0e056716c541381e6df78a80d134c5e30bebc9a0493c02c",
    "body_identity_version": 2,
    "diff_digest": "sha256:883e03c46600991956da6eb000683044098037295035f803333f5db65a5f0178",
    "head_ref": "pr315",
    "head_sha": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
    "pr": 315,
    "repository": "omry/reploy",
    "scope_authority": [
      {
        "digest": "sha256:078e63e84d432c2aad03120ca30e40ec4572a8970e6bf6be9d5008608a30f435",
        "path": "docs/MULTI_IDENTITY_D_DESIGN.md"
      },
      {
        "digest": "sha256:f5058bb465d6af9d58b98eb6fde19edd4ed710aff1cc2588173757d37cdbbc58",
        "path": "docs/MULTI_IDENTITY_E_DESIGN.md"
      },
      {
        "digest": "sha256:3ef44a7a0be43648f5df1faad39b16101978662c58c87d6fa8e7409093a58fe9",
        "path": "docs/MULTI_IDENTITY_IMPLEMENTATION_PLAN.md"
      },
      {
        "digest": "sha256:fe188bb8a80f7f235e99b023283749a3a9e3172e4adf70b70b495d80e50e9218",
        "path": "docs/MULTI_IDENTITY_MAIL_RECONCILIATION.md"
      },
      {
        "digest": "sha256:b049714f4a85d0f3fb204615897374377690564627bfcdd03e50c945fb042826",
        "path": "docs/MULTI_IDENTITY_SECURITY_CONTRACT.md"
      }
    ],
    "title_digest": "sha256:20bb7e40942532a1646c0db544cfa6ce9ab6d82ae088bed48e87a9c7542884f8"
  },
  "record_version": 4,
  "review_observations": [],
  "review_requests": [
    {
      "base_established_at": "2026-10-31T12:16:33Z",
      "base_ref": "pr314",
      "base_sha": "4f5c1610a88d9a54c90a0a0eee8d8e3a53fbd2c0",
      "body_digest": "sha256:9d6b6b8860c4767c312d0e58df41d5d5a8684ee014676c6ffa920ec758413128",
      "created_at": "2026-10-31T12:27:01Z",
      "head_sha": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
      "id": 6543348162,
      "kind": "regular-review"
    }
  ],
  "review_results": [
    {
      "base_ref": "pr314",
      "base_sha": "4f5c1610a88d9a54c90a0a0eee8d8e3a53fbd2c0",
      "body_digest": "sha256:7f0db021444d4a1e375969895d348ea10695751b68be3d32c77de5d8071cde0b",
      "commit_id": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
      "id": 6543359102,
      "inline_message_ids": [],
      "request_comment_id": 6543348162,
      "result_kind": "clean",
      "status": "result",
      "submitted_at": "2026-10-31T12:28:12Z",
      "unresolved_thread_ids": []
    }
  ],
  "revision_fingerprint": "sha256:aa833052b7c061fb183fdf07cefc6f3fe1004a10c0e5593bd2e9e5a3d2e5d41f",
  "rounds": [
    {
      "applied_fix_paths": [],
      "disposition_changes": [],
      "effective_diff_digest": "sha256:883e03c46600991956da6eb000683044098037295035f803333f5db65a5f0178",
      "finding_ids": [],
      "invariants": [
        "Exact old retirement precedes fresh current host admission and operation.",
        "Up requires trusted exact startup; detached handoff requires durable claim, qualified stream transfer and fresh exact observation.",
        "Owner-loss fence, native history and public inhibition retained."
      ],
      "outcome": "clean",
      "proposed_fix_paths": [],
      "resulting_head": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
      "review_observation_id": null,
      "review_request_id": 6543348162,
      "review_result_id": 6543359102,
      "reviewed_head": "844f3ac9e863916cbaa5a7e0a490fbfdb7dfdd7a",
      "root_cause": "No PR finding or correction. Independent full and remote exact-head reviews clean; full local validation and every required CI job passed.",
      "round": 1,
      "unresolved_current_slice_findings": 0,
      "unresolved_design_blockers": 0
    }
  ],
  "schema": "awd:swe:pr-cycle-state",
  "version": 2
}

@omry
omry marked this pull request as ready for review October 31, 2026 12:23
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-31T12:28:14.024082Z 844f3ac Manual request
🔒 Security Review ⚠️ Failed 2026-10-31T12:24:00.482907Z
We couldn’t complete this review. Comment @codex security review to try again.
844f3ac Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

The account paying for this security review has reached its Codex usage limits. The payer can check the Codex usage dashboard. For personal accounts, using credits requires enabling “Use credits for security reviews” in Code review settings. If you do not manage the paying account, contact this repository's admins.

@omry

omry commented Oct 31, 2026

Copy link
Copy Markdown
Owner Author

@codex review

Exact head: 844f3ac

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: 844f3ac9e8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@omry omry added the approved PR reviewed and approved label Oct 31, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved PR reviewed and approved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant