Repository navigation

fix: keep a crank's store work inside one transaction - #1021

Closed

sirtimid wants to merge 40 commits into

mainfrom

sirtimid/crank-rollback-integrity

Commits on Sep 7, 2026
- test: pin the transaction invariants #1005 left broken
  
  authored and
  sirtimid
  committed
  893b09f
- fix: keep a crank's store work inside one transaction
  
  sirtimid
  and
  claude
  committed
  0493967
- test(kernel-test): reap until the vat's GC is visible, not three times
  
  sirtimid
  and
  claude
  committed
  5e6cf5d
- test: fix rollback crank test
  sirtimid
  committed
  272f920
- fix(ocap-kernel): forget every savepoint when a crank rollback fails
  
  sirtimid
  and
  claude
  committed
  eeb5652
- fix(kernel-store): log an abort that fails while discarding a transaction
  
  sirtimid
  and
  claude
  committed
  d9971b0
- test(ocap-kernel): pin the flush's ordering against a failing enqueue
  
  sirtimid
  and
  claude
  committed
  48d46c6
- docs: correct the transaction claims review found wrong
  
  sirtimid
  and
  claude
  committed
  dc8d1de
- docs: cut the padding from this branch's comments and changelogs
  
  sirtimid
  and
  claude
  committed
  dc6eef4
- fix(ocap-kernel): revert cached values and GC candidates on crank rollback
  
  sirtimid
  and
  claude
  committed
  323dd18
- test(kernel-store): pin the failed COMMIT that wedges `_inTx`
  
  authored and
  sirtimid
  committed
  6c28b96
- test(ocap-kernel): pin the endCrank failure that buries the real error
  
  authored and
  sirtimid
  committed
  3d3fe3e
- test(kernel-node-runtime): pin the kernel store's missing logger
  
  authored and
  sirtimid
  committed
  f1e0ed0
- test(ocap-kernel): pin the release failure lost at the remote savepoint
  
  authored and
  sirtimid
  committed
  c10b5b9
- test: tighten the four repros after review
  
  authored and
  sirtimid
  committed
  7ed40cd
- fix(kernel-store): clear `_inTx` before the COMMIT, not after
  
  sirtimid
  and
  claude
  committed
  afc664f
- fix(ocap-kernel): stop `endCrank` burying the error that killed the run loop
  
  sirtimid
  and
  claude
  committed
  10b042a
- fix(ocap-kernel): report the remote release failure, not a missing savepoint
  
  sirtimid
  and
  claude
  committed
  5470554
- test(ocap-kernel): pin the in-memory revert against a failed crank rollback
  
  sirtimid
  and
  claude
  committed
  726d063
- fix(runtimes): give the kernel store a logger
  
  sirtimid
  and
  claude
  committed
  daae217
- chore: cite this PR in the changelogs
  
  sirtimid
  and
  claude
  committed
  8e0676b
- test(kernel-store): pin the transaction a failed COMMIT abandons
  
  sirtimid
  and
  claude
  committed
  2724dff
- fix(kernel-store): discard the transaction a failed COMMIT leaves open
  
  sirtimid
  and
  claude
  committed
  eab4681
- docs: trim changelog entries and comments
  
  sirtimid
  and
  claude
  committed
  cf07c28
- docs: cut the leftover narration from this branch's tests
  
  sirtimid
  and
  claude
  committed
  d8318d5
- test(kernel-store): pin the transaction a failed COMMIT leaves open
  
  committed
  29744e4
- fix(kernel-store): refuse to commit a transaction an abort could not end
  
  sirtimid
  and
  claude
  committed
  198380a
- test(ocap-kernel): pin the audit that runs after the crank answers its callers
  
  committed
  64ffca1
- fix(ocap-kernel): audit reference counts after the crank commits, not inside it
  
  sirtimid
  and
  claude
  committed
  be4f406
- test(kernel-store): pin the crank commit point against a foreign savepoint
  
  committed
  775636b
- fix(ocap-kernel): keep a crank and an out-of-crank savepoint from overlapping
  
  sirtimid
  and
  claude
  committed
  5e7a314
- test(kernel-test): reap until the shared import is released, not three times
  
  sirtimid
  and
  claude
  committed
  19689c6
- docs: changelog entries for the driver, audit, and savepoint fixes
  
  sirtimid
  and
  claude
  committed
  9b4717f
Commits on Sep 8, 2026
- fix(kernel-store): refuse every write while a transaction is abandoned, not just the ones that begin or commit
  
  sirtimid
  and
  claude
  committed
  7579669
- fix(ocap-kernel): let `stop` release the workers when the store refuses its timestamp
  
  sirtimid
  and
  claude
  committed
  7694758
Commits on Sep 11, 2026
- chore: point this PR's changelog links at the repo's new org
  
  sirtimid
  and
  claude
  committed
  99eeb9c
Commits on Sep 14, 2026
- fix(kernel-store): ask SQLite whether a transaction is open, rather than caching it
  
  sirtimid
  and
  claude
  committed
  33fd2e1
- fix(ocap-kernel): restore the GC candidates a rollback took, and close the gate's own gaps
  
  sirtimid
  and
  claude
  committed
  62cb7fa
- fix(ocap-kernel): refuse out-of-crank work that is not synchronous
  
  sirtimid
  and
  claude
  committed
  6f9e29d
Commits on Sep 15, 2026
- fix(ocap-kernel,kernel-store): keep a recorded vat death and an orphaned transaction out of the rollback
  
  sirtimid
  and
  claude
  committed
  0304ddc

Commits

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 11, 2026

Commits on Sep 14, 2026

Commits on Sep 15, 2026