docs: add ADR-0014, local store durability is per-call not per-event atomic - #610
Merged
Conversation
…atomic Record the decision from the local-store durability study: per-call committed durability is the contract, per-event atomicity is rejected (it would roll back the keeper Journal's RESERVED marker on the trap it exists to survive), and one opt-in apply batch verb is the sanctioned atomicity scope. Closes the doc-vs-code gap that claimed a per-event rollback that never existed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Add ADR-0014 recording the local-store durability model: per-call committed durability, not per-event atomic.
Why
The docs claimed an implicit per-event write transaction that rolls back on trap; it never existed, and building it would break the keeper Journal (a
RESERVEDmarker committed before a venue submit must survive the trap so the reconcile can find it). The ADR records the decision from the three-lens durability study: per-call durability is the contract, per-event atomicity is rejected in all three mechanisms (held transaction, staged overlay, snapshot), and one opt-inapplybatch verb (#609) is the sanctioned atomicity scope. The docs correction rides in #606; this is the decision of record behind it.Testing
Documentation only.
AI Assistance
Implemented with Claude Code.
Refs nullislabs/nexum-runtime#11