Development record
2026-10-16 — A hand-back tombstone names one of seven kinds and is read fail-closed (facilitator-on-delegation, drain-many-accounts): the kinds are the drain's four routed kinds (user-visible, trust-rule, design-finding, second-package), unachievable for a lane stopped after its fix rounds, which is the kind its route already names, stuck and closed, while no-found-at is left out because it never holds a reservation; a kind outside them, a record blob that is not one full lowercase object name, either trailer without the other, or either on a reservation that is not released, reads the tip as unreadable as every other malformed known trailer does, the writer refuses it before anything runs, and every reservation is measured against the longest such tombstone with a SHA-256 object name so it can always be handed back (grounds: closed-vocabulary, fail-closed parsing of input on a shared remote as language-theoretic security recommends, the reservation reader's existing rule for malformed trailers, and dcn-2610150000000001; spc-2610161044461448 step 3; iss-2610161015370582).
2026-10-16 — A hand-back tombstone names one of seven kinds and is read fail-closed (facilitator-on-delegation, drain-many-accounts): the kinds are the drain's four routed kinds (user-visible, trust-rule, design-finding, second-package), unachievable for a lane stopped after its fix rounds, which is the kind its route already names, stuck and closed, while no-found-at is left out because it never holds a reservation; a kind outside them, a record blob that is not one full lowercase object name, either trailer without the other, or either on a reservation that is not released, reads the tip as unreadable as every other malformed known trailer does, the writer refuses it before anything runs, and every reservation is measured against the longest such tombstone with a SHA-256 object name so it can always be handed back (grounds: closed-vocabulary, fail-closed parsing of input on a shared remote as language-theoretic security recommends, the reservation reader's existing rule for malformed trailers, and dcn-2610150000000001; spc-2610161044461448 step 3; iss-2610161015370582).
Frontmatter
| id | dcn-2610161412287479 |
|---|---|
| type | decision |
| date | 2026-10-16 |
.abcd/work/decisions/dcn-2610161412287479-a-hand-back-tombstone-names-one-of-seven.md
open on GitHub ↗ · commit history ↗
mentions4
- dcn-26101500000000012026-10-15 — Sessions under different accounts, on different machines and in cloud sessions tell each other what they are doing through short fixed-form notes on the shared remote, with no free text, and what is really a hold stays a reservation (the product thinker's ruling, "ok, agreed, option 1", choosing between the three options of research note 2026-10-14-session-messages-across-accounts; recorded on itd-2609151838312703 decisions 1 and 2). A forge coordination issue and a private side repository were the options not chosen.
- iss-2610161015370582A drain's hand-backs and judgements live only in the checkout that made them: routeHandBack promotes the issue to an intent draft in that checkout, uncommitted, then the release pushes a tombstone so the issue reads free everywhere, and eligibility ignores related_intents, so every other account's drain judges or works the same issue again and promotes it to its own draft id.
- itd-2610161016394967Drains on several accounts share the work
- spc-2610161044461448drain-many-accounts