Skip to content

orphan - #11707

Closed
briansrls wants to merge 2 commits into
mainfrom
session/sunny-ant-606
Closed

orphan#11707
briansrls wants to merge 2 commits into
mainfrom
session/sunny-ant-606

Conversation

@briansrls

Copy link
Copy Markdown
Contributor

Auto-opened by session-dashboard for session sunny-ant-606.
Pushing to session/sunny-ant-606 advances this PR.

Worker attestation

Before flipping this PR to ready for review, confirm each item:

  • Title describes the change (not the session id or branch).
  • PR body summarises what and why (replace the TODO below).
  • Tests run: name the command (e.g. npm test, cargo test) and the result.
  • If this closes a work item, the body contains a Closes #N directive.
  • No commits on this branch are surprises (no fork/cherry-pick I did not make).
  • No secrets / credentials / large binaries staged.

Summary

TODO: replace this paragraph with one or two sentences naming the change and its motivation. Reviewers read this first.

Test plan

  • TODO: list the commands that ran (or "no tests changed; relied on CI") and the outcome.

Brian Searls and others added 2 commits September 18, 2026 22:22
…oup holds it forever

lifecycle_intent_cannot_orphan had its ExitType arms inverted. Under
ExitType=cgroup a surviving process keeps the unit running after MainPID
exits, so no stop is issued and KillMode=control-group never executes:
srv2-02 held a cancelled job's claim_executor (16 GB) for 2.7 days, and
srv1-03 / srv1-07 were held 16 days by processes a successful job left.

Measured on srv1 (systemd 255) 2026-09-18 in transient units: ExitType=main
reaps the child whether it honors or ignores SIGTERM; ExitType=cgroup leaves
the unit active with MainPID=0 and the child alive in both cases.

- predicate renamed lifecycle_intent_stops_finished_incarnation; its input
  is whether the main process exits when the incarnation ends (run.sh does,
  except its return-code-2 relaunch loop), not whether the listener is MainPID
- declared intent: ExitType=main + KillMode=control-group
- witnesses refuse both contracts the fleet has run (KillMode=process and
  the ExitType=cgroup drop-in); microVM admission refuses the latter and is
  stated as necessary, not sufficient, pending the sanitation gate

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
… admits

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@gunbai-bot

gunbai-bot Bot commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Closing: this branch carries only #11662's pre-squash commits, and their content is already on main. No new change. — sent from sunny-ant-606

@gunbai-bot gunbai-bot Bot closed this Sep 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant