Repository navigation
fix: retain native turn work across transient persistence failures - #74
Conversation
|
Sentinel 已审核此变更,未发现已核验问题,但发现需要人工确认的风险。 另有 2 个需要人工确认的风险;黄色 advisory 不阻塞合并,建议开发 agent review advisory 评论并逐条确认。 开发 agent 查询详情: 调用 MCP 工具 由 Sentinel 审核 · 目标提交 cef26f362b4d |
|
Sentinel 保留了 2 个尚未确认的审核候选。这些黄色条目不阻塞合并;红色 P0/P1 与其他独立硬门禁不受影响。 单一猜测、缺少变更行证据或纯 checklist 的候选会统一降为 P3。
需要完整证据时,可用行末 由 Sentinel 审核 · 目标提交 cef26f362b4d |
Only a native turn caches its reports with their evidence when the queue fails. Elsewhere the injections stay unreported for a later end, which remembers their retention with its own edits, so this end must not as well. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A claim released at the epoch looked days past the evidence lifetime, so the next background run could delete evidence the turn's redelivery was about to take. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
Sentinel 已审核此变更,未发现已核验问题,但发现需要人工确认的风险。 另有 2 个需要人工确认的风险;黄色 advisory 不阻塞合并,建议开发 agent review advisory 评论并逐条确认。 开发 agent 查询详情: 调用 MCP 工具 由 Sentinel 审核 · 目标提交 d580d7322998 |
|
Merged with maintainer changes: main merged in (reopen / claim release / queue-failure moved onto main's single turn-end path); a released claim's mtime is now set just past the 60 s claim timeout instead of 1970, which let the next pruning pass delete it as expired before redelivery (test now prunes before the second take); continuing after a queue failure is limited to native hosts, where reports are kept with their evidence; notes-store |
|
Sentinel 保留了 2 个尚未确认的审核候选。这些黄色条目不阻塞合并;红色 P0/P1 与其他独立硬门禁不受影响。 单一猜测、缺少变更行证据或纯 checklist 的候选会统一降为 P3。
需要完整证据时,可用行末 由 Sentinel 审核 · 目标提交 d580d7322998 |
Summary
A temporary evidence read failure could permanently close a verified native turn. A report queue write failure could preserve its retry payload but skip the work candidate and retention bookkeeping.
Reopen only a failed pre-write evidence read for the same turn, epoch and settlement. Release uncommitted notes claims for immediate recovery. When report enqueue fails after its retry payload is cached, finish the turn bookkeeping before surfacing the original error.
Evidence
Merge Danger
Two-way. Reopening is limited to errors before writes. The report queue error is still surfaced. Immediate evidence recovery requires access to the claim files.