{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > exactly-once under an HONEST flush deadline (stage C tuning): a fire that lands while the serving scheduler is mid-settle is drained ONCE — the re-drains that follow every cut cycle skip the still-in-flight copy; the counter reads exactly 1 and ONE commit consequences the event (mutation: the drain's in-flight guard removed → a copy per cut cycle, processed ≫ appended, value ≫ 1)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > drains a fire exactly once under an HONEST flush deadline: a fire that lands while the serving scheduler is mid-settle is drained ONCE — the re-drains that follow every cut cycle skip the still-in-flight copy; the counter reads exactly 1 and ONE commit consequences the event (mutation: the drain's in-flight guard removed → a copy per cut cycle, processed ≫ appended, value ≫ 1)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the guard holds through the SEAL→OUTCOME window (stage C tuning; self-review finding 1): a re-drain that reaches the entry AFTER its copy's consequence has SEALED into a wave the store has not yet committed skips it — the copy is released by the wave OUTCOME, never at seal (mutation: release at the seal → that re-drain queues a second copy: processed 2, value 2)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > holds the guard through the SEAL→OUTCOME window: a re-drain that reaches the entry AFTER its copy's consequence has SEALED into a wave the store has not yet committed skips it — the copy is released by the wave OUTCOME, never at seal (mutation: release at the seal → that re-drain queues a second copy: processed 2, value 2)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > rapid-fire coalescing under CONSTRUCTED queue depth (the RULED sx2-gate re-tensing, 2026-08-21 — owner: \"i like (3) as well\"): K events queued ahead of ONE drain yield K completed runs, each consequenced exactly once, in EXACTLY ONE consequence-carrying derived commit (D-v2-2's commit-level batching; testing.md §5 row 3's discriminating half)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > coalesces rapid fires under CONSTRUCTED queue depth: K events queued ahead of ONE drain yield K completed runs, each consequenced exactly once, in EXACTLY ONE consequence-carrying derived commit (commit-level batching; testing.md §5 row 3's discriminating half)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > mark/effects atomicity at the DISPATCH layer (events.md §4, RULED 2026-08-27 — the a04 write-side member): a served dispatch whose handler argument cannot resolve is WITHDRAWN, never sealed — the pre-stamped mark must not commit alone; the entry stays pending, re-drains once the argument resolves, and mark + effects land in ONE commit exactly once (mutation: the finalize withdrawal removed → the a04 1-op mark-only consequence, the event permanently consumed with zero effects)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > keeps mark and effects atomic at the DISPATCH layer (events.md §4): a served dispatch whose handler argument cannot resolve is WITHDRAWN, never sealed — the pre-stamped mark must not commit alone; the entry stays pending, re-drains once the argument resolves, and mark + effects land in ONE commit exactly once (mutation: the finalize withdrawal removed → a 1-op mark-only consequence, the event permanently consumed with zero effects)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the handler-not-run withdrawal carries the arrival-order BARRIER (events.md §2 + §5, review-6459 F1): a later-arrived same-space served event queued behind the withdrawn head defers with it instead of overtaking, and the healed re-drain lands both consequences in arrival order (mutation: empty the finalize sweep → B seals while A is still pending and the durable log reads [\"B\",\"A\"] against arrival [a1,b1] — the b01 inversion)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > carries the arrival-order BARRIER on a handler-not-run withdrawal (events.md §2 + §5): a later-arrived same-space served event queued behind the withdrawn head defers with it instead of overtaking, and the healed re-drain lands both consequences in arrival order (mutation: empty the finalize sweep → B seals while A is still pending and the durable log reads [\"B\",\"A\"] against arrival [a1,b1] — the b01 inversion)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > a permanently unresolvable argument hardens into a §5 DROP whose notice names the REAL class (review-6459 F2): the handler was runnable and dispatched — the deferrals were withdrawn dispatches, not load attempts, and the durable drop record must not say otherwise"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > hardens a permanently unresolvable argument into a §5 DROP whose notice names the REAL class: the handler was runnable and dispatched — the deferrals were withdrawn dispatches, not load attempts, and the durable drop record must not say otherwise"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the renderer-trust attestation rides the durable entry and is RE-MARKED at the served dispatch (fan-out stage B, OW34's sister-mark carriage): a fire whose event carried the process-local renderer-trust mark appends `rendererTrusted: true`, the served handler sees a renderer-trusted event; an unmarked fire appends no attestation and the served handler sees none; a forged attestation value is refused at admission"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > carries the renderer-trust attestation on the durable entry and RE-MARKS it at the served dispatch: a fire whose event carried the process-local renderer-trust mark appends `rendererTrusted: true`, the served handler sees a renderer-trusted event; an unmarked fire appends no attestation and the served handler sees none; a forged attestation value is refused at admission"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the ruled result carriage (owner, 2026-08-29): a served result-declaring handler WRITES its receipt — the declared value, in the handling's OWN consequence commit (mark and result atomic), by the serving side alone; the client's echo publishes the same cause-derived address and never writes (mutation: drop the serving write → no receipt doc; write outside the handler tx → consequenceOf linkage breaks; re-enable the client write → an authored commit appears)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > writes a served result-declaring handler's receipt (result carriage): the declared value lands in the handling's OWN consequence commit (mark and result atomic), by the serving side alone; the client's echo publishes the same cause-derived address and never writes (mutation: drop the serving write → no receipt doc; write outside the handler tx → consequenceOf linkage breaks; re-enable the client write → an authored commit appears)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the ruled result carriage, value-less arm: a served handler that returns undefined STILL writes its receipt — the `{}` existence witness (owner: 'even if the value is undefined'), one derived commit, atomic with the mark"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > writes a receipt for a served handler that returns `undefined` (result carriage, value-less arm): the `{}` existence witness, one derived commit, atomic with the mark"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the ruled result carriage, CAS-loss arm: a receipt that ALREADY exists when the serving run goes to write is a LOUD NO-OP — the standing value wins, no second write, and the wave still commits (mark + consequences land); the pre-created cell comes from the real OFF-arm client writer under the SAME invocation id, so the pin also proves the cross-arm address agreement (mutation: drop the existence check → the receipt is overwritten and a derived writer appears; make CAS-loss fail the wave → the entry never consequences)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > treats a receipt that ALREADY exists when the serving run goes to write as a LOUD NO-OP (result carriage, CAS-loss arm): the standing value wins, no second write, and the wave still commits (mark + consequences land); the pre-created cell comes from the real OFF-arm client writer under the SAME invocation id, so the pin also proves the cross-arm address agreement (mutation: drop the existence check → the receipt is overwritten and a derived writer appears; make CAS-loss fail the wave → the entry never consequences)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > a deferral consumes REAL TIME, never back-to-back waves: the drop cannot land inside the creation-race window (verdict blocker, 2026-08-12)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > consumes REAL TIME on a deferral, never back-to-back waves: the drop cannot land inside the creation-race window"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > an event-only admission RACING a park reactivates the space — the fire-time gate honors the undelivered-events criterion, not just live sessions (verdict blocker, 2026-08-12)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > reactivates the space on an event-only admission RACING a park: the fire-time gate honors the undelivered-events criterion, not just live sessions"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > C8d through the PRODUCTION cascade path (review 2026-08-11 M2): a raced parent's requeue folds its same-wave cascade child — no orphan consequence, exactly-once on retry"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > folds a raced parent's same-wave cascade child on requeue through the PRODUCTION cascade path (C8d): no orphan consequence, exactly-once on retry"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > (α1)+(α1b)+(α4) the QUEUED leftover and the in-flight one, side by side: a served parent emits TWO LT1 cascade children; the first is still RUNNING when the flush deadline fires (an async handler parked on a test gate), the second sits QUEUED behind it — the deadline decision PURGES the queued copy (no notice on its entry) and the running copy, completing after its wave closed, is REFUSED at the seal; the next drain delivers both entries ONCE each with a streamEntry; per-event: one consequence commit each, the child effect applied exactly twice in total (mutations: purge skipped → the queued copy runs after the close and is refused at the seal instead, `lt1LeftoversPurged` 0 / `lt1LateSealsRefused` 2; seal refusal AND the orphan arm's absent-emitter clause skipped → the effect applied THREE times, the lunch double; all three seats off → four times, observed only with the counter asserts relaxed — as written the pin reddens first on the purge counter)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > purges the QUEUED leftover and refuses the in-flight one, side by side ((α1)+(α1b)+(α4)): a served parent emits TWO LT1 cascade children; the first is still RUNNING when the flush deadline fires (an async handler parked on a test gate), the second sits QUEUED behind it — the deadline decision PURGES the queued copy (no notice on its entry) and the running copy, completing after its wave closed, is REFUSED at the seal; the next drain delivers both entries ONCE each with a streamEntry; per-event: one consequence commit each, the child effect applied exactly twice in total (mutations: purge skipped → the queued copy runs after the close and is refused at the seal instead, `lt1LeftoversPurged` 0 / `lt1LateSealsRefused` 2; seal refusal AND the orphan arm's absent-emitter clause skipped → the effect applied THREE times; all three seats off → four times, observed only with the counter asserts relaxed — as written the pin reddens first on the purge counter)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > (α1b)+(α4) the IN-FLIGHT residue: an LT1 cascade copy still RUNNING when the deadline closes its appending wave seals into a LATER wave and is REFUSED at the seal destination (before it enters any wave — the drain's copy, running next, reads clean state); the drain's copy is the one completed run (mutation: refusal skipped → the copy's consequences commit unmarked beside the drain's marked copy, the child's effect applied twice — the lunch gate's vote-toggle double)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > refuses the IN-FLIGHT residue at the seal ((α1b)+(α4)): an LT1 cascade copy still RUNNING when the deadline closes its appending wave seals into a LATER wave and is REFUSED at the seal destination (before it enters any wave — the drain's copy, running next, reads clean state); the drain's copy is the one completed run (mutation: refusal skipped → the copy's consequences commit unmarked beside the drain's marked copy, the child's effect applied twice)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > (α1b)+(α4) + a same-eventId SIBLING tx (independent review B1 — a LOST delivery on the build tip, a regression vs the W1 base): an ASYNC LT1 cascade child commits a separate event-handler-stamped tx carrying its own eventId (the served navigateTo intent shape) BEFORE an await that spans the flush deadline; the sibling seals into the appending wave and survives, the handler's own tx seals late and is REFUSED — the entry must land UNMARKED (only the LT1 copy's OWN run may mark its seq-less entry, never a sibling) so the drain re-delivers it: the child's effect lands exactly once, one consequence commit names the event, the sibling's write stands (mutation: the `lt1 === true` gate on the seq-less marking removed → the sibling's survival marks the entry consequenced, the refused copy is never re-delivered, the effect lands ZERO times — `processed` 1, `counterC` 0)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > leaves the entry UNMARKED when a same-eventId SIBLING tx survives the wave its handler's own tx misses ((α1b)+(α4)): an ASYNC LT1 cascade child commits a separate event-handler-stamped tx carrying its own eventId (the served navigateTo intent shape) BEFORE an await that spans the flush deadline; the sibling seals into the appending wave and survives, the handler's own tx seals late and is REFUSED — the entry must land UNMARKED (only the LT1 copy's OWN run may mark its seq-less entry, never a sibling) so the drain re-delivers it: the child's effect lands exactly once, one consequence commit names the event, the sibling's write stands (mutation: the `lt1 === true` gate on the seq-less marking removed → the sibling's survival marks the entry consequenced, the refused copy is never re-delivered, the effect lands ZERO times — `processed` 1, `counterC` 0)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > (α3) + a same-eventId SIBLING tx (independent review M1): the LT1 copy of a DERIVATION emitter's superseded append commits a sibling event-handler-stamped tx (the served navigateTo intent shape) inside the same wave; the orphan refusal must take the SIBLING down with the handler's contribution — neither half of an orphan lands (a navigation intent enacted for an event with zero durable entries is events.md §4's FORBIDDEN half-delivery); the refusal is counted once per EVENT (mutation: the sibling fold removed → the handler half is refused, the intent half LANDS — `side` 1) — the commit-sink gate makes the race deterministic"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > takes a same-eventId SIBLING tx down with an orphan-refused handler contribution ((α3)): the LT1 copy of a DERIVATION emitter's superseded append commits a sibling event-handler-stamped tx (the served navigateTo intent shape) inside the same wave; the orphan refusal must take the SIBLING down with the handler's contribution — neither half of an orphan lands (a navigation intent enacted for an event with zero durable entries is events.md §4's FORBIDDEN half-delivery); the refusal is counted once per EVENT (mutation: the sibling fold removed → the handler half is refused, the intent half LANDS — `side` 1) — the commit-sink gate makes the race deterministic"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > arrival order across streams survives a drain deferral: an earlier-arrived event whose sidecar defers (sync failure here; the view-lag check is the same barrier) HOLDS later arrivals back instead of being overtaken (events.md §2's ordering sentence; the OW45 arm-B b01 red — a deferred Create-Another consequenced after the final Create, leaving the terminal state wrong; mutation: the deferral arms back to `continue` → the log reads A,B,A)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > holds arrival order across streams through a drain deferral: an earlier-arrived event whose sidecar defers (sync failure here; the view-lag check is the same barrier) HOLDS later arrivals back instead of being overtaken (events.md §2's ordering sentence; the live shape is a deferred Create-Another consequenced after the final Create, leaving the terminal state wrong; mutation: the deferral arms back to `continue` → the log reads A,B,A)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the load-park barrier reaches entries the drain has NOT queued yet: a park failure landing MID-PASS stops the pass, instead of letting the next-arrived entry queue behind the barrier's back and overtake (the scheduler-side barrier can only hold what is already IN the event queue, and each new sidecar's sync() is an await — so the gap is real; held open here with the drain's sync gate on B's sidecar. Mutation: drop the #loadParkDeferredInPass check in #drainStreamEvents → B1 queues into the healed load and the log reads [\"A\",\"B\",\"A\"], the OW45 arm-B b01 overtake shape)"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > stops the pass on a park failure landing MID-PASS, so the load-park barrier reaches entries the drain has NOT queued yet instead of letting the next-arrived entry queue behind the barrier's back and overtake (the scheduler-side barrier can only hold what is already IN the event queue, and each new sidecar's sync() is an await — so the gap is real; held open here with the drain's sync gate on B's sidecar. Mutation: drop the #loadParkDeferredInPass check in #drainStreamEvents → B1 queues into the healed load and the log reads [\"A\",\"B\",\"A\"] — the overtake shape)"}}
{"date":"2026-09-12","from":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > the IN-QUEUE arrival-order barrier, discriminated: a later-arrived event whose closure does NOT touch the failing doc — so it is perfectly runnable and already QUEUED behind the parked head — defers with the head instead of overtaking it (events.md §2; independent review F3: the previous construction had both handlers reading the armed doc, so a barrier-less B parked on the same failure and self-deferred through the HEAD arm, making the in-queue half undiscriminable. Here the park rejection is DEFERRED until both entries are provably queued, so the mid-pass half cannot be what saves the order. Mutation: empty the barrier loop in failHeadEventLoadPark → B1 consequences while A2 is deferred and the log reads [\"A\",\"B\",\"A\"])"},"to":{"k":"unit","s":"runner","n":"Phase 3 events-down (serving side) > discriminates the IN-QUEUE arrival-order barrier: a later-arrived event whose closure does NOT touch the failing doc — so it is perfectly runnable and already QUEUED behind the parked head — defers with the head instead of overtaking it (events.md §2; with both handlers reading the armed doc, a barrier-less B would park on the same failure and self-defer through the HEAD arm, making the in-queue half undiscriminable. Here the park rejection is DEFERRED until both entries are provably queued, so the mid-pass half cannot be what saves the order. Mutation: empty the barrier loop in failHeadEventLoadPark → B1 consequences while A2 is deferred and the log reads [\"A\",\"B\",\"A\"])"}}