Every externally callable operation is timed directly, over MCP and over HTTP, the denominator is generated from the registry, and a regression against the accepted baseline fails the check.
- status
- stable
majordomus bench times every operation through the real transports and reports the
slowest first; bench coverage --check refuses a required target nobody covers; bench --check compares a run with this platform's baseline under the policy's thresholds; bench baseline update records a reviewable, tracked baseline and refuses a dirty tree. The
executor's counters say whether an execution was answered from the cache, so a claim about
work done is a count rather than a clock.
A baseline belongs to the machine that measured it; a value from one platform says nothing
about another, and no number in prose is trusted over the file that recorded it.
The capabilities behind it
The capability modules of the executable this feature names, each with the capabilities it composes. The command line, the HTTP route, the MCP tool and the reference beside every row are projections of one declaration, not four registrations.
Performance
perf
behaviorally verified
This process's work counters and phase timings: what happened once at startup and what happens per call, for the structural tests and the benchmark evidence.
apps/majordomus-cli/src/capability/builtin/perf.rs
The commands that run it
What it answers
Operational moments from the Why catalogue that name one of this feature's mechanisms. Nothing here was assigned: a moment appears because it names a rule, a command, a capability or a claim this feature also names.
The rules that hold it
-
advisoryA performance claim carries its measurement
project.performance-evidence
-
blockingNo endpoint of the Rust executable without a benchmark, and no number without evidence
project.rust-benchmark-coverage
-
advisoryEvery public command is benchmarkable from the registry
project.benchmarkable-commands
-
blockingA request never rebuilds canonical state, and a cache is never trusted without an equivalence test
project.rust-hot-path
-
advisoryA command reads each canonical file at most once
project.hot-path-reads-once
-
advisoryDerived state is computed once per state version
project.derived-once
What is guaranteed
-
guaranteed
Every externally callable operation of the Rust executable is a benchmark target with a denominator generated from the registry, and a missing case fails the structural check
-
guaranteed
After startup, no MCP or HTTP request of the Rust executable scans the repository, builds the index or the registry, derives a schema or builds a projection, and perf.counters proves it
-
guaranteed
A cached capability of the Rust executable answers the same value uncached, cold and warm, a hit runs no handler, errors and commands are never cached, and the key carries the registry fingerprint
-
guaranteed
The paths of the Rust executable that scale with the repository carry criterion benchmarks that build on every push, and every executable capability declares its benchmark policy, required or waived for a typed reason
-
guaranteed
Every gate the Rust executable must pass is one script, scripts/rust-check, and CI runs that script on every change that can reach the crate
-
guaranteed
Line coverage of the Rust crate is measured on every change that can affect the crate and on every push to master, and the build fails under the floor in scripts/rust-coverage-threshold, one integer read by CI, by scripts/rust-check and by just coverage
Executable use cases