Zero-leak state stores: hard caps, durable spill, and generation-fenced sweeping by lidge-jun · Pull Request #829 · lidge-jun/opencodex

docs(plan): map the zero-leak state-store unit before touching the stores

lidge-jun

committed

docs(plan): final refinements to the continuation, blob, and benchmark phase docs

lidge-jun

committed

docs(plan): harden the continuation spill transaction through eight review rounds

lidge-jun

committed

docs(plan): lock the spill replacement to one atomic stub swap

lidge-jun

committed

feat(responses): hard-cap continuation state with durable spill

lidge-jun

committed

docs(plan): pin blob liveness to the request and make admission atomic

lidge-jun

committed

docs(plan): settle the blob-cap accounting classes across three audit rounds

lidge-jun

committed

feat(caps): bound the blob, replay, vision, and image caches by bytes

lidge-jun

committed

docs(plan): fence eviction against stale writers and prune by combo target

lidge-jun

committed

docs(plan): give reconciliation unique attempt generations and live-object triggers

lidge-jun

committed

feat(sweep): reconcile every keyed store against the live topology

lidge-jun

committed

refactor(sweep): simplify the eviction fences to the generation contract

lidge-jun

committed

docs(plan): align the B3/B4 adjudications with the repaired contracts

lidge-jun

committed

docs(plan): retarget the registry caps at the owners that actually leak

lidge-jun

committed

test(ci): give bulk durable-IO tests a real budget and a clean memo slate

lidge-jun

committed

feat(runtime): cap the registries, flights, and retained diagnostics

lidge-jun

committed

fix(runtime): make stale disposers, aborted refresh owners, and forced shutdown lease-exact

lidge-jun

committed

docs(plan): record the wp4b audit and review adjudications

lidge-jun

committed

docs(plan): anchor the byte budget to the delivered hooks and real boundaries

lidge-jun

committed

Merge remote-tracking branch 'origin/dev' into dev

lidge-jun

committed

feat(memory): enforce an app-owned retained-state byte budget

lidge-jun

committed

fix(memory): key usage-summary age on read completion and gate enforcement single-flight

lidge-jun

committed

docs(plan): record the wp5 budget audit rounds

lidge-jun

committed

Merge remote-tracking branch 'origin/dev' into dev

lidge-jun

committed

docs(plan): rebuild the translator bounds around what actually retains bytes

lidge-jun

committed

feat(translator): bound every translation buffer with a mandatory turn budget

lidge-jun

committed

feat(consent): refuse agent-driven stars on every surface, not just the CLI

lidge-jun

committed

docs(plan): fence the background shells before shutdown ever snapshots them

lidge-jun

committed

feat(shells): give every background shell an owner, a deadline, and a fenced exit

lidge-jun

committed

fix(bench): close the eight gaps the benchmark self-audit surfaced

lidge-jun

committed

docs(devlog): record zero-leak proxy benchmark evidence

lidge-jun

committed

docs(plan): sync the translator bounds doc with the shipped reservation API

lidge-jun

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Zero-leak state stores: hard caps, durable spill, and generation-fenced sweeping - #829

Zero-leak state stores: hard caps, durable spill, and generation-fenced sweeping#829
lidge-jun merged 32 commits into
devfrom
codex/zero-leak-state-stores

Commits on Aug 1, 2026

docs(plan): map the zero-leak state-store unit before touching the stores

docs(plan): final refinements to the continuation, blob, and benchmark phase docs

docs(plan): harden the continuation spill transaction through eight review rounds

docs(plan): lock the spill replacement to one atomic stub swap

feat(responses): hard-cap continuation state with durable spill

docs(plan): pin blob liveness to the request and make admission atomic

docs(plan): settle the blob-cap accounting classes across three audit rounds

feat(caps): bound the blob, replay, vision, and image caches by bytes

docs(plan): fence eviction against stale writers and prune by combo target

docs(plan): give reconciliation unique attempt generations and live-object triggers

feat(sweep): reconcile every keyed store against the live topology

refactor(sweep): simplify the eviction fences to the generation contract

docs(plan): align the B3/B4 adjudications with the repaired contracts

docs(plan): retarget the registry caps at the owners that actually leak

test(ci): give bulk durable-IO tests a real budget and a clean memo slate

feat(runtime): cap the registries, flights, and retained diagnostics

fix(runtime): make stale disposers, aborted refresh owners, and forced shutdown lease-exact

docs(plan): record the wp4b audit and review adjudications

docs(plan): anchor the byte budget to the delivered hooks and real boundaries

Merge remote-tracking branch 'origin/dev' into dev

feat(memory): enforce an app-owned retained-state byte budget

fix(memory): key usage-summary age on read completion and gate enforcement single-flight

docs(plan): record the wp5 budget audit rounds

Merge remote-tracking branch 'origin/dev' into dev

docs(plan): rebuild the translator bounds around what actually retains bytes

feat(translator): bound every translation buffer with a mandatory turn budget

feat(consent): refuse agent-driven stars on every surface, not just the CLI

docs(plan): fence the background shells before shutdown ever snapshots them

feat(shells): give every background shell an owner, a deadline, and a fenced exit

fix(bench): close the eight gaps the benchmark self-audit surfaced

docs(devlog): record zero-leak proxy benchmark evidence

docs(plan): sync the translator bounds doc with the shipped reservation API