I3911 — The executor reads its audit trail, its halt and its lease from origin, so any clone continues it and a stale holder is refused

○PŘIPRAVENO vlna 0 · p0 · profil implementation · běží samostatně

Part of landing-survives-any-session — Landing green work survives any session, any restart and any machine.

Cíl

The integration audit trail, the halt left by an unverified landing and the executor lease move from one clone (.git/majordomus/integration/events.jsonl, an flock under the common git dir) to a ref on origin, appended by non-forced pushes. The lease names its holder, its host and its expiry, and the holder renews it with a non-forced push immediately before every landing, so a holder that slept past its expiry and wakes after another clone took over is refused before it lands. The --continuous gate counts verified landings from that ref, so a takeover machine is admitted with the same record and stopped by the same halt.

Proč

On 2026-10-22 only the clone on machine 641bdb94 had the five verified merges --continuous needs (16 in total, 9 after #822); every other machine and clone starts at 0 and is refused, and a halt left on one clone does not stop another. The lease today is an 1800 s flock (drain.rs:54) that a sleeping laptop keeps while another machine would take over.

Aktuální stav

drain.rs keeps the trail per clone (events.jsonl) and refuses --continuous below five verified merges since the last verification_failed (drain.rs:1396-1423); the lease is an flock plus an exclusive mesh claim whose scope falls back to integration//master when the clone has no observation (exclusive.rs:289-293).

Cílový stav

Two clones on two machines read the same trail and the same halt from origin; an expired lease is taken over by another clone after its expiry and not before; the old holder, waking, finds its renewal refused and lands nothing.

Rozsah

• apps/majordomus-cli/tests/integration_executor.rs
• apps/majordomus-cli/tests/integration_trail.rs
• apps/majordomus-cli/src/integration/drain.rs
• apps/majordomus-cli/src/integration/exclusive.rs
• apps/majordomus-cli/src/integration/metrics.rs
• docs/INTEGRATION.md
• docs/INTEGRATION_ROLLOUT.md
• .ai/repo/project/issues/I3911.yaml

Závislosti

Žádné. Tento úkol je kořenem grafu.

Co na tom čeká

• I3913✕BLOCKED The executor runs as a user service outside every agent session, restarted after a crash and never after a halt

Kritéria přijetí

• A clone with no local trail reads the verified count and the halt from origin
• A lease whose holder stopped renewing it is taken over after its expiry and not before
• A holder whose lease was taken over is refused at its renewal and lands nothing (case an_expired_lease_holder_is_refused_before_it_lands)

Validace

• bin/majordomus plan validate
• env -u MAJORDOMUS_SHARE cargo test --manifest-path apps/majordomus-cli/Cargo.toml --lib -- integration::
• env -u MAJORDOMUS_SHARE cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test integration_executor

Požadované důkazy

• state_on_origin

Důkazy

Nic nezaznamenáno. Za každým tokenem výše musí stát příkaz nebo artefakt, než lze tento úkol dokončit; vyprávění se odmítá.

Časová osa

zahájeno

—

ověřeno

—

dokončeno

—

Tato tři pole, důkazy výše a stav závislostí jsou vše, z čeho se stav skládá. Neexistuje žádné pole stavu, které by s nimi mohlo být v rozporu.

Canonical record: .ai/repo/project/issues/I3911.yaml. Read it back with majordomus plan show I3911.