feat(cluster-server): add durable PostgreSQL public gateway ledger by usr-bin-roygbiv · Pull Request #141 · LycaonLLC/t4-code

usr-bin-roygbiv · 2026-07-22T01:23:09Z

OP-05 stacked dependencies

This draft is intentionally stacked on exact independently reviewed dependency heads:

OP-02 CRD lifecycle: 35cf631c1277808be7ca7c6f6a7f39462a95179c
OP-04 controller reconciliation (contains OP-02): b056ec5972bd9f1f58a62de21a1485914d3d29bf
OP-03 public API contract/generated boundary: 39f06a541d9ae0aac021ca40cf26410292a9279f
integration base merge: 8c67342021ccbd7ea5fa5048afe475f56ce9e61b

Retarget/rebase immediately after dependency PRs merge; do not squash away dependency provenance before then.

Observable contract

PostgreSQL-backed public T4 API v1 with authenticated scoped principals; transactional command/intent/event/outbox ordering before Kubernetes mutation; durable idempotency and If-Match semantics; fenced owner epochs and crash recovery; bounded scoped SSE cursor/reconnect/410; cancellation and restart recovery. The CI suite covers all ten OP-05 scenarios against a real pinned PostgreSQL 17.6 service and an observable fake Kubernetes applier.

Non-goals

No public exposure of the private /v1/ws Hub Wire compatibility endpoint.
No ORM, in-memory fallback, broad Kubernetes credentials, or database credentials in runtime Pods.
No changes to dependency branches or unrelated applications.

Migration / rollback

Pending implementation after the mandatory tests-only red proof. The final ledger will use monotonic transactional migrations and an explicit rollback artifact/proof.

Proof ledger

tests-only red candidate: 1f389d1 (GitHub and authoritative repo-38 Woodpecker handles pending)
final exact green: pending
authorized cluster deployment smoke: residual/pending until deployable packaging is available

No local test/build/lint/generation/format commands are used for this PR.

wolfiesch

This draft is not safe to advance yet. Blocking issues reproduced on 08c367a: command.submit only writes a pending-command annotation and no consumer dispatches it to OMP, yet the DB marks it completed; a fast create then PATCH skips the create and leaves the patch retrying 404 forever; all three default replicas can steal an unexpired lease, and the Kubernetes write is not atomically fenced; exact PATCH replay checks current revision before idempotency; required durable configuration is absent by default and the NetworkPolicy has no PostgreSQL egress; request limits are enforced only after request.text buffers and replacement-decodes the body; and PostgreSQL lifecycle state never converges from Kubernetes status. The branch also embeds an older API head than current PR 137. Please restack after 137/139 stabilize, then address these contracts before final proof.

oleksoleksoleks · 2026-07-22T03:36:27Z

@usr-bin-roygbiv @wolfiesch — gentle request: both of you may need your weights reset.

One model is overfitting to stacked-proof ceremony; the other is sampling at temperature 0 across every blocker in one very dense completion. The useful middle ground is less dramatic and more executable:

Keep this PR in draft and restack it after feat: add executable T4 API v1 contract and SDK #137/operator: reconcile dependency changes safely #139 stabilize.
Turn the review into a checked acceptance list, preserving the concrete blockers: real command.submit dispatch, create/PATCH ordering, unexpired lease ownership plus write fencing, idempotency-before-current-revision behavior, default durable config and PostgreSQL egress, pre-buffer request limits, and Kubernetes-to-PostgreSQL lifecycle convergence.
Have the author answer each item with an exact commit and focused proof. No “final green” claim until every item is closed.
Have the reviewer distinguish contract/correctness blockers from cleanup, then re-review one exact SHA rather than the moving stack.

The findings should stand unless disproved; the draft status means they are a work queue, not a eulogy. Please fine-tune against the same acceptance set instead of each other’s tone.

wolfiesch requested changes Jul 22, 2026

View reviewed changes

wolfiesch self-assigned this Jul 22, 2026

wolfiesch added the Roy label Jul 22, 2026

usr-bin-roygbiv added 26 commits July 22, 2026 04:16

test: define T4 API v1 client conformance

d69a67e

feat: define T4 API v1 contract and SDK boundary

6058f1c

ci: emit T4 API generation artifacts

329ac18

build: recover T4 API generation lockfile

b50b7d9

fix: use OpenAPI parser named API

8a7e8cc

feat: add generated T4 API v1 types

e549d60

fix: typecheck T4 API conformance fixtures

6cd0e12

test: expose T4 API semantic blockers

bcca1cb

fix: enforce T4 API public contract semantics

797717c

build: accept authorized T4 API schema artifact

65a8524

test: complete bounded API conformance cases

93f50e5

test: expose remaining API runtime blockers

033e64d

fix: fail closed across public API payloads

788516d

build: accept revised T4 API schema artifact

b0a7445

fix: select bounded conformance frames

4a21fce

test: assert bounded consecutive watch retries

cdbf49d

test: cover OP03 fail-closed review contracts

bf6a356

fix: close OP03 fail-closed review gaps

dfba497

build: accept authorized OP03 schema artifact

77c9380

fix: enforce exact watch response contract

9209caf

fix: close watch retry and body ownership gaps

ecc29a0

test: prove watch media and stream cleanup

fb42ef8

test: align terminal watch protocol assertions

ed2c7f7

test: cover Unicode bounds and SSE cancellation

7673616

fix: validate response lengths by code point

578e3c4

test: cover strict response protocol gaps

b555a13

usr-bin-roygbiv added 28 commits July 22, 2026 04:23

test(operator): cover split-reader dependency cleanup

32d4a04

fix(operator): authoritatively clean revoked sessions

a10e70b

test(operator): expose stale workspace session cache

3d09b4a

fix(operator): list workspace sessions authoritatively

d428c0a

test(operator): reject stale PVC authority

4a7cdf6

fix(operator): revalidate PVC authority

b98470d

fix(t4-api): preserve heartbeat cursor semantics

b9163ce

test(operator): gate existing pods on PVC authority

ece837c

test(t4-api): model heartbeat cursor liveness

0768883

fix(operator): gate child repairs on PVC authority

20e9878

chore(op05): integrate final operator and API contracts

fb9ebf4

test(cluster-server): require durable PostgreSQL gateway

6d319d9

test(cluster-server): expose durable gateway red

3c1a1ea

feat(cluster-server): persist public gateway ledger

4c43a86

fix(cluster-server): transact durable migrations

d25c26f

fix(cluster-server): validate durable ledger epochs

5b7915e

test(cluster-server): compare PostgreSQL counts as bigint

8c0ae56

test(cluster-server): scope PostgreSQL suite to service job

8b7dd06

test(cluster): cover durable gateway review repairs

8584ff0

fix(cluster): harden durable gateway ledger

dc15203

fix(cluster): close durable gateway race gaps

9aebb07

test(cluster): stabilize durable gateway concurrency proof

a387783

test(cluster): pause atomic event retention boundary

c55e9bc

test(cluster): isolate durable gateway scenarios

265bfa4

test(cluster): preserve durable restart state

18925e9

test(cluster): preserve lease owner across restart

fca3d2c

test(chart): match quoted secret projection keys

366fae8

test(cluster): cover review repair contracts

8c80250

usr-bin-roygbiv force-pushed the agent/t4-op05-durable-gateway-ledger branch from 92f5712 to 8c80250 Compare July 22, 2026 05:17

fix(cluster): close durable gateway review defects

c813647

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(cluster-server): add durable PostgreSQL public gateway ledger#141

feat(cluster-server): add durable PostgreSQL public gateway ledger#141
usr-bin-roygbiv wants to merge 132 commits into
LycaonLLC:mainfrom
usr-bin-roygbiv:agent/t4-op05-durable-gateway-ledger

usr-bin-roygbiv commented Jul 22, 2026

Uh oh!

wolfiesch left a comment

Uh oh!

oleksoleksoleks commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

usr-bin-roygbiv commented Jul 22, 2026

OP-05 stacked dependencies

Observable contract

Non-goals

Migration / rollback

Proof ledger

Uh oh!

wolfiesch left a comment

Choose a reason for hiding this comment

Uh oh!

oleksoleksoleks commented Jul 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants