Skip to content

Keep Tether role replacement launches under native custody - #158

Merged
zenithruneblade merged 1 commit into
devfrom
codex/tether-role-restart-custody
Nov 11, 2026
Merged

zenithruneblade merged 1 commit into
devfrom
codex/tether-role-restart-custody

Conversation

@zenithruneblade

Copy link
Copy Markdown
Contributor

Compiled Tether role units now set Restart=no, so a fenced or failed runtime cannot start a replacement manager invocation outside native launch custody. Native activation and boot resume retain authority over eligible replacement launches, with pending revocation completed first.

The compiler-to-renderer regression covers all four Tether role kinds before and after peer revocation. It verifies the rendered restart policy and existing dependencies, while guarding Core's unchanged Restart=always default. The owning Tether guide documents this boundary.

Static AST, Ruff and formatting checks passed. Required CI will run the existing compiler test selection and clean documentation build on this exact three-file change. Existing retained-incarnation closure checks and runtime fences are unchanged.

Refs #20.

@zenithruneblade
zenithruneblade requested a review from a team as a code owner November 11, 2026 03:32
@zenithruneblade
zenithruneblade merged commit 8fd9b81 into dev Nov 11, 2026
15 checks passed
@zenithruneblade
zenithruneblade deleted the codex/tether-role-restart-custody branch November 11, 2026 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant